# http://www.gotroot.com/mod_security+rules # Comment Spam Rules for modsec 2.x # # Download from: http://www.gotroot.com/downloads/ftp/mod_security/2.0/blacklist.conf # # Created by Michael Shinn of the Prometheus Group (http://www.prometheus-group.com) # Copyright 2005 and 2006 by Michael Shinn and the Prometheus Group, all rights reserved. # Redistribution is strictly prohibited in any form, including whole or in part. # #Version: N-20061022-01 # # # THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS AS IS # AND ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE # IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE # ARE DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE # LIABLE FOR ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR # CONSEQUENTIAL DAMAGES (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF # SUBSTITUTE GOODS OR SERVICES; LOSS OF USE, DATA, OR PROFITS; OR BUSINESS # INTERRUPTION) HOWEVER CAUSED AND ON ANY THEORY OF LIABILITY, WHETHER IN # CONTRACT, STRICT LIABILITY, OR TORT (INCLUDING NEGLIGENCE OR OTHERWISE) # ARISING IN ANY WAY OUT OF THE USE OF THIS SOFTWARE, EVEN IF ADVISED OF # THE POSSIBILITY OF SUCH DAMAGE. #http://www.gotroot.com #see website for more information SecRule REQUEST_URI "!(/compose\.php\?)" chain SecRule ARGS|REQUEST_BODY|REQUEST_URI "Subject\:" chain SecRule ARGS:Bcc ".*\@" SecRule REQUEST_URI "!(/compose\.php\?)" chain SecRule ARGS|REQUEST_BODY|REQUEST_URI "Subject\:" chain SecRule ARGS|REQUEST_BODY|REQUEST_URI "\s*bcc\:" SecRule REQUEST_URI "!(/compose\.php\?)" chain SecRule ARGS|REQUEST_BODY|REQUEST_URI "\s*bcc\:\s*[a-z0-9._%-]+@[A-Z0-9.-]+\.[a-z]{2,}" SecRule REQUEST_URI "!(/compose\.php\?)" chain SecRule ARGS "\n[[:space:]]*(to|b?cc)[[:space:]]*:.*@" SecRule REQUEST_URI "!(/compose\.php\?)" chain SecRule ARGS "\s*bcc\:\s*[a-z0-9._%-]+\@.*\.[a-z]{2,}" SecRule HTTP_x-aaaaaaaaa|HTTP_XAAAAAAAAA ".+$" SecRule HTTP_x-aaaaaaaaaaa|HTTP_XAAAAAAAAAAA ".+$" SecRule HTTP_x-aaaaaaaaaaaa|HTTP_X_AAAAAAAAAAAA ".+$" #SecRule HTTP_XXXXXXXXXXXXXXX ".+$" #unknown pattern in testing, logging only, please send #any patterns RELATED TO SPAM OR ATTACKS you log with with these rules #please do not send false positives for this rule set, just turn it off #SecRule HTTP_aaaaaaaaa|HTTP_AAAAAAAAA ".+$" "log,pass" #SecRule HTTP_aaaaaaaaaaa|HTTP_AAAAAAAAAAA ".+$" "log,pass" #SecRule HTTP_aaaaaaaaaaaa|HTTP_AAAAAAAAAAAA ".+$" "log,pass" #SecRule HTTP_aaaaaaaaaaaaaaa|HTTP_AAAAAAAAAAAAAAA ".+$" "log,pass" SecRule HTTP_Referer|ARGS "(blow)+[\w\-_.]*(jobs?)+[\w\-_.]*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(gay)+[\w\-_.]*(beastiality)+[\w\-_.]*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(beastilality)+[\w\-_.]*(stories)+[\w\-_.]*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(free)+[\w\-_.]*(beastiality)+[\w\-_.]*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(horse|animal|dog)+[\w\-_.]*(porn|cocks|dick|sex|penis|blowj.*)+[\w\-_.]*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(buy)+[\w\-_.]*online[\w\-_.]*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(diet|penis)+[\w\-_.]*(pills|enlargement)[\w\-_.]*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(enlarg|enhanc).*(male|penis|natural).*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(enlarg|enhanc).*(male|penis|natural)\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(online)+[\w\-_.]*pharmacy" SecRule HTTP_Referer|ARGS "(i|la)-sonneries?[\w\-_.]*\.[a-z]{2,}" SecRule REQUEST_URI "!(/sugarcrm/index\.php)" chain SecRule HTTP_Referer|ARGS "(silagra|morphine|ritalin|levitra|lolita|carisoprodol|phentermine|amitriptyline|diethylpropion|viagra|lisinopril|vig-?rx|zyban|valtex|xenical|adipex|meridia)+[\w\-_.]*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(ephedrine|neurontin|glucosamine|testosterone|cialis|lipitor|effexor|propecia|celebrex|gluclosamine|lexapro|ephedra|levitra)+[\w\-_.]*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(magazine)+[\w\-_.]*(finder|netfirms)+[\w\-_.]*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(male|penis)enlarg*\.(biz|com|net|org|us|info)" SecRule HTTP_Referer|ARGS "(male|penis).*(enlarg|enhanc|natural|pill|surgery|traction)" SecRule HTTP_Referer|ARGS "(mike)+[\w\-_.]*apartment[\w\-_.]*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(milf)+[\w\-_.]*(hunter|moms|fucking|lessons)[\w\-_.]*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(natural|penis|male).*(enlarg.*|enhanc.*)" SecRule HTTP_Referer|ARGS "(natural|penis|male)+[\w\-_.]*(enlarg.*|enhanc.*)" SecRule HTTP_Referer|ARGS "(online)+[\w\-_.]*(prescription|casino|roulette|slot)+[\w\-_.]*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "[\w\-_.]*(casino|roulette)\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "[\w\-_.]*(casino|roulette).*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(slot)+[\w\-_.]*machines\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(prozac|zoloft|xanax|valium|hydrocodone|vicodin|paxil|vioxx)+[\w\-_.]*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(ragazze)-?\w+\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(texas)+[\w\-_.]*holdem" SecRule HTTP_Referer|ARGS "(phentermine)+[\w\-_.]*online" SecRule HTTP_Referer|ARGS "(texas)+[\w\-_.]*hold[\w\-_.].*em" SecRule HTTP_Referer|ARGS "texas[\w\-_.]hold[\w\-_.]em" SecRule HTTP_Referer|ARGS "pacific+[\w\-_.]*poke.*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "poker+[\w\-_.]*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "[\w\-_.]*poker\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "[\w\-_.]*poker.*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "poker.*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(random|free|internet)+[\w\-_.]*slots\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(wellbutrin|tenuate|tramadol|pheromones|phendimetrazine|ionamin|ortho.?tricyclen|retin.?a\b)+[\w\-_.]*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "ultram\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(celexa|valtrex|zyrtec|\bhgh\b|ambien\b|flonase|allegra|didrex|renova|bontril|nexium)+[\w\-_.]*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "([\w\-_.]+\.)?(l(so|os)tr)\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(lose[\w\-_.]*weight|weight[\w\-_.]*loss).*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "(prices|pills|buy|diet*|medic(ine|ation|al)|dru.*)\.pharma.*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "01-beltonen\.com" SecRule HTTP_Referer|ARGS "01-klingeltoene\.at" SecRule HTTP_Referer|ARGS "01-klingeltoene\.de" SecRule HTTP_Referer|ARGS "01-loghi\.com" SecRule HTTP_Referer|ARGS "01-logo\.com" SecRule HTTP_Referer|ARGS "01-logot\.com" SecRule HTTP_Referer|ARGS "01-logotyper\.com" SecRule HTTP_Referer|ARGS "01-melodia\.com" SecRule HTTP_Referer|ARGS "01-melodias\.com" SecRule HTTP_Referer|ARGS "01-ringetone\.com" SecRule HTTP_Referer|ARGS "01-ringsignaler\.com" SecRule HTTP_Referer|ARGS "01-ringtone\.com" SecRule HTTP_Referer|ARGS "01ringtones\.co\.uk" SecRule HTTP_Referer|ARGS "01-ringtones\.us" SecRule HTTP_Referer|ARGS "01-soittoaanet\.com" SecRule HTTP_Referer|ARGS "01-suonerie\.com" SecRule HTTP_Referer|ARGS "01-toque\.com" SecRule HTTP_Referer|ARGS "[0-9a-z_.\-]*(bulkcrawler|sysco[mn]-[a-z0-9]+|jagk|kloony|azgirlcam)\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "[0-9a-z_.\-]*(camfun24|jardimed|kylos(net)?|istarthere|roxtet|freshgirls)\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "[0-9a-z_.\-]*(dailyorbit|insurancequoteweb|i-horny|livenet|filthserver)\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "[0-9a-z_.\-]*(formula42|ilya|9sekund|find-it-buy-it|xopy|bukakke)\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "[0-9a-z_.\-]*fortunecity\.[a-z.]+\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "[0-9a-z_.\-]*(notlong|isacommie|musicbox[0-9]|miccel|rooody|rowdd|colkk)\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "[0-9a-z_.\-]*(nullnix|plongs|pimrim|ewilla|startseek|ponagansetpost)\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "[0-9a-z_.\-]*(sysrem[0-9]+|lemonrider[0-9]*|exitq|defunctportal|andrewsaluk)\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "0adult-cartoon\.com" SecRule HTTP_Referer|ARGS "0adult-manga\.com" SecRule HTTP_Referer|ARGS "0cartoon\.com" SecRule HTTP_Referer|ARGS "0cartoon-porn\.com" SecRule HTTP_Referer|ARGS "0cartoon-sex\.com" SecRule HTTP_Referer|ARGS "0casino-online\.com" SecRule HTTP_Referer|ARGS "0casinoonline\.com" SecRule HTTP_Referer|ARGS "0catch\.com" SecRule HTTP_Referer|ARGS "0free-hentai\.com" SecRule HTTP_Referer|ARGS "0freehentai\.com" SecRule HTTP_Referer|ARGS "0hentai-anime\.com" SecRule HTTP_Referer|ARGS "0hentai-manga\.com" SecRule HTTP_Referer|ARGS "0hentaimanga\.com" SecRule HTTP_Referer|ARGS "0internet-casino\.com" SecRule HTTP_Referer|ARGS "0livesex\.com" SecRule HTTP_Referer|ARGS "0manga\.com" SecRule HTTP_Referer|ARGS "0manga-porno\.com" SecRule HTTP_Referer|ARGS "0manga-sesso\.com" SecRule HTTP_Referer|ARGS "0sesso-amatoriale\.com" SecRule HTTP_Referer|ARGS "0sessoanale\.com" SecRule HTTP_Referer|ARGS "0sesso\.biz" SecRule HTTP_Referer|ARGS "0sessogratis\.us" SecRule HTTP_Referer|ARGS "0sesso-orale\.biz" SecRule HTTP_Referer|ARGS "0sesso\.us" SecRule HTTP_Referer|ARGS "0sex-toons\.com" SecRule HTTP_Referer|ARGS "0sfondi\.com" SecRule HTTP_Referer|ARGS "0sfondi-desktop\.com" SecRule HTTP_Referer|ARGS "0suonerie\.com" SecRule HTTP_Referer|ARGS "0tatuaggi\.com" SecRule HTTP_Referer|ARGS "0toons\.com" SecRule HTTP_Referer|ARGS "0video-porno\.com" SecRule HTTP_Referer|ARGS "0virtual-casino\.com" SecRule HTTP_Referer|ARGS "0xxx-cartoon\.com" SecRule HTTP_Referer|ARGS "100free\.com" SecRule HTTP_Referer|ARGS "100hgh\.com" SecRule HTTP_Referer|ARGS "100-sex\.com" SecRule HTTP_Referer|ARGS "101pills\.com" SecRule HTTP_Referer|ARGS "108bikes\.com" SecRule HTTP_Referer|ARGS "123-home-improvement-equity-loans\.com" SecRule HTTP_Referer|ARGS "123onlinepoker\.com" SecRule HTTP_Referer|ARGS "123sessogratis\.com" SecRule HTTP_Referer|ARGS "123-sign-making-equipment-and-supplies\.com" SecRule HTTP_Referer|ARGS "125mb\.com" SecRule HTTP_Referer|ARGS "15668\.com" SecRule HTTP_Referer|ARGS "16pp\.com" SecRule HTTP_Referer|ARGS "1a1merchantaccounts\.com" SecRule HTTP_Referer|ARGS "1asphost\.com" SecRule HTTP_Referer|ARGS "1-bignaturals\.com" SecRule HTTP_Referer|ARGS "1concerttickets\.com" SecRule HTTP_Referer|ARGS "1-cumfiesta\.com" SecRule HTTP_Referer|ARGS "1-engineering-books\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "1footballtickets\.com" SecRule HTTP_Referer|ARGS "1freespot\.com" SecRule HTTP_Referer|ARGS "1-klingeltone\.com" SecRule HTTP_Referer|ARGS "1on8\.com" SecRule HTTP_Referer|ARGS "1on8\.co\.uk" SecRule HTTP_Referer|ARGS "1-online-poker\.us" SecRule HTTP_Referer|ARGS "1-poker-games\.biz" SecRule HTTP_Referer|ARGS "1st-advantage-credit-repair\.com" SecRule HTTP_Referer|ARGS "1st-auto-insurance-4u\.com" SecRule HTTP_Referer|ARGS "1stchoiceontv\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "1st-host\.org" SecRule HTTP_Referer|ARGS "1stincomeracing\.co\.uk" SecRule HTTP_Referer|ARGS "1stindustrialdirectory\.com" SecRule HTTP_Referer|ARGS "\.redir\.cz" SecRule HTTP_Referer|ARGS "\.vnsoul\.org" SecRule HTTP_Referer|ARGS "\.caribbean-poker-trx\.com" SecRule HTTP_Referer|ARGS "\.baccarat.*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "pay-casinos\.com" SecRule HTTP_Referer|ARGS "\.psxtreme\.com" SecRule HTTP_Referer|ARGS "bhqx\.com" SecRule HTTP_Referer|ARGS "unique-poker\.com" SecRule HTTP_Referer|ARGS "moneydetails\.net" SecRule HTTP_Referer|ARGS "\.reachcasino\.com" SecRule HTTP_Referer|ARGS "\.society-health\.com" SecRule HTTP_Referer|ARGS "1stlookcd\.com" SecRule HTTP_Referer|ARGS "1st-payday-loans\.net" SecRule HTTP_Referer|ARGS "1st-phonecard\.com" SecRule HTTP_Referer|ARGS "1st-poker-online\.com" SecRule HTTP_Referer|ARGS "1st-printer-ink-cartridge\.com" SecRule HTTP_Referer|ARGS "1st-shemale-sex\.com" SecRule HTTP_Referer|ARGS "1-welivetogether\.com" SecRule HTTP_Referer|ARGS "1-wholesale-distributor\.com" SecRule HTTP_Referer|ARGS "1xp6z\.com" #SecRule HTTP_Referer|ARGS "20fr\.com" SecRule HTTP_Referer|ARGS "216\.130\.167\.230" SecRule HTTP_Referer|ARGS "247-rx\.net" SecRule HTTP_Referer|ARGS "24-hour-fitness-online\.com" SecRule HTTP_Referer|ARGS "2ndmortgageinterestrates\.com" SecRule HTTP_Referer|ARGS "2teens\.net" SecRule HTTP_Referer|ARGS "2twinks\.com" SecRule HTTP_Referer|ARGS "\.2waky\.com" SecRule HTTP_Referer|ARGS "2zj\.cn" SecRule HTTP_Referer|ARGS "321cigarettes\.com" SecRule HTTP_Referer|ARGS "3333\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "3333\.ws" SecRule HTTP_Referer|ARGS "333-casino\.com" SecRule HTTP_Referer|ARGS "333-poker\.com" SecRule HTTP_Referer|ARGS "33633\.net" SecRule HTTP_Referer|ARGS "365jp\.com" SecRule HTTP_Referer|ARGS "38ha\.com" SecRule HTTP_Referer|ARGS "3-day-diet-plan\.com" SecRule HTTP_Referer|ARGS "3daytrialporn\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "3host\.com" SecRule HTTP_Referer|ARGS "3sixtyfour\.com" SecRule HTTP_Referer|ARGS "3yaoi\.com" SecRule HTTP_Referer|ARGS "404host\.com" SecRule HTTP_Referer|ARGS "404servers\.com" SecRule HTTP_Referer|ARGS "41b\.net" SecRule HTTP_Referer|ARGS "42tower\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "42tower\.ws" SecRule HTTP_Referer|ARGS "444-casino\.com" SecRule HTTP_Referer|ARGS "444-poker\.com" SecRule HTTP_Referer|ARGS "4hs8\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "4hs8\.com" SecRule HTTP_Referer|ARGS "4mg\.com" SecRule HTTP_Referer|ARGS "4result\.net" SecRule HTTP_Referer|ARGS "-4u\.info" SecRule HTTP_Referer|ARGS "4u-topshelfpussy\.com" SecRule HTTP_Referer|ARGS "4womenoftheworld\.com" SecRule HTTP_Referer|ARGS "-4-you\.info" SecRule HTTP_Referer|ARGS "5000n\.com" SecRule HTTP_Referer|ARGS "50webs\.(com|net|org|biz|info)" SecRule HTTP_Referer|ARGS "51asa\.com" SecRule HTTP_Referer|ARGS "51\.net" SecRule HTTP_Referer|ARGS "555-poker\.com" SecRule HTTP_Referer|ARGS "5amateurs\.com" SecRule HTTP_Referer|ARGS "5ux\.com" SecRule HTTP_Referer|ARGS "65\.217\.108\.182" SecRule HTTP_Referer|ARGS "666-casino\.com" SecRule HTTP_Referer|ARGS "666-gambling\.com" SecRule HTTP_Referer|ARGS "69\.61\.11\.163" SecRule HTTP_Referer|ARGS "6p\.org\.uk" SecRule HTTP_Referer|ARGS "6x\.to" SecRule HTTP_Referer|ARGS "7host\.com" SecRule HTTP_Referer|ARGS "7p\.org\.uk" SecRule HTTP_Referer|ARGS "7yardsweb\.com" SecRule HTTP_Referer|ARGS "888cas\.com" SecRule HTTP_Referer|ARGS "888jack\.com" SecRule HTTP_Referer|ARGS "888-online-poker\.com" SecRule HTTP_Referer|ARGS "88aabb\.com" SecRule HTTP_Referer|ARGS "8bit\.co\.uk" SecRule HTTP_Referer|ARGS "8gold\.com" SecRule HTTP_Referer|ARGS "8k\.com" SecRule HTTP_Referer|ARGS "8th\S*street\S*latina\S*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "8yardsweb\.com" SecRule HTTP_Referer|ARGS "911easymoney\.com" SecRule HTTP_Referer|ARGS "911pills\.info" SecRule HTTP_Referer|ARGS "989888\.com" SecRule HTTP_Referer|ARGS "9irl\.com" SecRule HTTP_Referer|ARGS "9p\.org\.uk" SecRule HTTP_Referer|ARGS "9sekund\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "a1cellphoneaccessories\.info" SecRule HTTP_Referer|ARGS "a1digitalcameras\.info" SecRule HTTP_Referer|ARGS "a1metalbuildings\.info" SecRule HTTP_Referer|ARGS "a1-mortgage-finder\.com" SecRule HTTP_Referer|ARGS "a1steelbuildings\.info" SecRule HTTP_Referer|ARGS "a1timemanagement\.info" SecRule HTTP_Referer|ARGS "a-1-versicherungsvergleich\.de" SecRule HTTP_Referer|ARGS "abc3x\.com" SecRule HTTP_Referer|ARGS "abnehmen-ganz-sicher\.com" SecRule HTTP_Referer|ARGS "abocams\.de" SecRule HTTP_Referer|ARGS "about-enzyte" SecRule HTTP_Referer|ARGS "aboutgrouphomes\.com" SecRule HTTP_Referer|ARGS "abymetro\.org\.uk" SecRule HTTP_Referer|ARGS "academyofmusic\.us" SecRule HTTP_Referer|ARGS "acceptcreditcardsonlineinternetmerchantaccountservices\.com" SecRule HTTP_Referer|ARGS "acceptcreditcardsrealtime\.com" SecRule HTTP_Referer|ARGS "accessthepeace\.com" SecRule HTTP_Referer|ARGS "accompagnatrici\.cc" SecRule HTTP_Referer|ARGS "account-master.ru" SecRule HTTP_Referer|ARGS "accountservices\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "achtung\.hopto\.org" SecRule HTTP_Referer|ARGS "acomputer4u\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "acornfm\.com" SecRule HTTP_Referer|ARGS "acornwebdesign\.co\.uk" SecRule HTTP_Referer|ARGS "acrs\.us" SecRule HTTP_Referer|ARGS "activerx\.com" SecRule HTTP_Referer|ARGS "acyclovir\.net" SecRule HTTP_Referer|ARGS "addictinggames\.com" SecRule HTTP_Referer|ARGS "adspo(o|l)l\.(com|net|org|biz|info)" SecRule HTTP_Referer|ARGS "adminshop\.com" SecRule HTTP_Referer|ARGS "aducasher\.spb\.ru" SecRule HTTP_Referer|ARGS "adult-dvd-dot\.com" SecRule HTTP_Referer|ARGS "adult-dvds-dot\.com" SecRule HTTP_Referer|ARGS "adultfreehosting\.com" SecRule HTTP_Referer|ARGS "adult-free-webcams\.com" SecRule HTTP_Referer|ARGS "adultfriendfinder\.com" SecRule HTTP_Referer|ARGS "adultfriendfindernow\.com" SecRule HTTP_Referer|ARGS "adultfriendfindersite\.com" SecRule HTTP_Referer|ARGS "adult-friend\.info" SecRule HTTP_Referer|ARGS "adultfriendsite\.com" SecRule HTTP_Referer|ARGS "adult-games\.name" SecRule HTTP_Referer|ARGS "adulthostpro\.com" SecRule HTTP_Referer|ARGS "adultlingerieuk\.com" SecRule HTTP_Referer|ARGS "adult-manga\.org" SecRule HTTP_Referer|ARGS "adultnonstop\.com" SecRule HTTP_Referer|ARGS "adultpagina.nl" SecRule HTTP_Referer|ARGS "adultporncentral\.net" SecRule HTTP_Referer|ARGS "adult-porno\.us" SecRule HTTP_Referer|ARGS "adultserviceproviders\.com" SecRule HTTP_Referer|ARGS "adultshare\.com" SecRule HTTP_Referer|ARGS "adultsitescenter\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "adultstartsites\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "advantage-quotes\.com" SecRule HTTP_Referer|ARGS "advisordvd\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "a--e\.com" SecRule HTTP_Referer|ARGS "aektschen\.de" SecRule HTTP_Referer|ARGS "aesthetics\.co\.il" SecRule HTTP_Referer|ARGS "affilino\.net" SecRule HTTP_Referer|ARGS "afreeserver\.com" SecRule HTTP_Referer|ARGS "agiz\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "ahbabe\.com" SecRule HTTP_Referer|ARGS "aimite\.com" SecRule HTTP_Referer|ARGS "airfare-links\.net" SecRule HTTP_Referer|ARGS "airshow-china\.com\.cn" SecRule HTTP_Referer|ARGS "alawna\.blogspot\.com" SecRule HTTP_Referer|ARGS "albinshu\.com" SecRule HTTP_Referer|ARGS "alfonssackpfeiffe\.com" SecRule HTTP_Referer|ARGS "allago\.de" SecRule HTTP_Referer|ARGS "all-calmortgage\.com" SecRule HTTP_Referer|ARGS "all-debt-consolidation\.org" SecRule HTTP_Referer|ARGS "allfind\.us" SecRule HTTP_Referer|ARGS "all-fioricet\.com" SecRule HTTP_Referer|ARGS "all-gay-porn\.us" SecRule HTTP_Referer|ARGS "allinsurancetype\.com" SecRule HTTP_Referer|ARGS "allmagic\.ru" SecRule HTTP_Referer|ARGS "alloha\.info" SecRule HTTP_Referer|ARGS "allohaweb\.com" SecRule HTTP_Referer|ARGS "alloz\.com" SecRule HTTP_Referer|ARGS "all-poker-online" SecRule HTTP_Referer|ARGS "allslots\.com" SecRule HTTP_Referer|ARGS "allthediets\.com" SecRule HTTP_Referer|ARGS "allthroating\.com" SecRule HTTP_Referer|ARGS "all-we-live-together\.com" SecRule HTTP_Referer|ARGS "almacenpc\.com" SecRule HTTP_Referer|ARGS "alphacarolinas\.org" SecRule HTTP_Referer|ARGS "alright\.com\.ru" SecRule HTTP_Referer|ARGS "alt-bdsm\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "altersvorsorge-1a\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "alumnicards\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "alumnicards\.com" SecRule HTTP_Referer|ARGS "amateurjerkoff\.org" SecRule HTTP_Referer|ARGS "amateur-lesbian\.us" SecRule HTTP_Referer|ARGS "amateur-movie\.us" SecRule HTTP_Referer|ARGS "amateur-naked\.us" SecRule HTTP_Referer|ARGS "amateur-porn-gallery\.com" SecRule HTTP_Referer|ARGS "amateur-porno\.us" SecRule HTTP_Referer|ARGS "amateur-site\.us" SecRule HTTP_Referer|ARGS "amateurs\.r00m\.com" SecRule HTTP_Referer|ARGS "amateursuite\.com" SecRule HTTP_Referer|ARGS "amateurs-xxx\.us" SecRule HTTP_Referer|ARGS "amateur-thumbnail\.com" SecRule HTTP_Referer|ARGS "amateur-thumbs\.net" SecRule HTTP_Referer|ARGS "amateurxpass\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "amazing-satellite-tv-deals\.info" SecRule HTTP_Referer|ARGS "americacashfast\.com" SecRule HTTP_Referer|ARGS "americancdduplication\.com" SecRule HTTP_Referer|ARGS "americanpaydayloans\.net" SecRule HTTP_Referer|ARGS "american-single-dating\.com" SecRule HTTP_Referer|ARGS "americastgp\.com" SecRule HTTP_Referer|ARGS "amoxicillin-online\.net" SecRule HTTP_Referer|ARGS "analgirls.nl" SecRule HTTP_Referer|ARGS "analingus.nl" SecRule HTTP_Referer|ARGS "analloverz\.com" SecRule HTTP_Referer|ARGS "analsex.d4f\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "anal-sex-pictures\.us" SecRule HTTP_Referer|ARGS "andrewsaluk\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "andyedf\.de" SecRule HTTP_Referer|ARGS "angenehmen-aufenthalt\.de" SecRule HTTP_Referer|ARGS "animalfuck\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "animal-fuck\.org" SecRule HTTP_Referer|ARGS "animal-porn\.ws" SecRule HTTP_Referer|ARGS "animalsex-movies-archive\.com" SecRule HTTP_Referer|ARGS "animalsex-pics-gallery\.com" SecRule HTTP_Referer|ARGS "anime-adult\.us" SecRule HTTP_Referer|ARGS "anime-hentai-porn\.com" SecRule HTTP_Referer|ARGS "anime-manga\.us" SecRule HTTP_Referer|ARGS "anime-porn\.name" SecRule HTTP_Referer|ARGS "anime-porn-sex-xxx\.com" SecRule HTTP_Referer|ARGS "anime-sex-1\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "anime-sex-cartoon-porn\.com" SecRule HTTP_Referer|ARGS "annunci-coppie\.net" SecRule HTTP_Referer|ARGS "annunci-erotici\.net" SecRule HTTP_Referer|ARGS "annunci-erotici\.org" SecRule HTTP_Referer|ARGS "annunci-personali\.org" SecRule HTTP_Referer|ARGS "annunci-sesso\.org" SecRule HTTP_Referer|ARGS "annunci-sesso\.us" SecRule HTTP_Referer|ARGS "annuncisesso\.us" SecRule HTTP_Referer|ARGS "anomic\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "anonsi\.com" SecRule HTTP_Referer|ARGS "anonymous-blogger\.com" SecRule HTTP_Referer|ARGS "ansar-u-deen\.org" SecRule HTTP_Referer|ARGS "anticlick\.com\.ru" SecRule HTTP_Referer|ARGS "anti-exploit\.com" SecRule HTTP_Referer|ARGS "anuntisinmobiliaria\.com" SecRule HTTP_Referer|ARGS "anxietydisorders\.biz" SecRule HTTP_Referer|ARGS "anylight4u\.com" SecRule HTTP_Referer|ARGS "anything4health\.com" SecRule HTTP_Referer|ARGS "anzwers\.org" SecRule HTTP_Referer|ARGS "aol-com\.us" SecRule HTTP_Referer|ARGS "ap8\.com" SecRule HTTP_Referer|ARGS "apecceosummit2003\.com" SecRule HTTP_Referer|ARGS "a-pics\.net" SecRule HTTP_Referer|ARGS "apollopatch\.com" SecRule HTTP_Referer|ARGS "apornhost\.com" SecRule HTTP_Referer|ARGS "apotheke-heute\.com" SecRule HTTP_Referer|ARGS "applyonline\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "apply-to-green-card\.org" SecRule HTTP_Referer|ARGS "appollo\.org" SecRule HTTP_Referer|ARGS "approval-loan\.com" SecRule HTTP_Referer|ARGS "a-purfectdream-expression\.com" SecRule HTTP_Referer|ARGS "aquari\.ru" SecRule HTTP_Referer|ARGS "aquatyca\.net" SecRule HTTP_Referer|ARGS "arabicmusic.nl" SecRule HTTP_Referer|ARGS "arcsecurity\.co\.uk" SecRule HTTP_Referer|ARGS "area-code-npa-nxx\.com" SecRule HTTP_Referer|ARGS "argendrom\.com" SecRule HTTP_Referer|ARGS "armor2net\.com" SecRule HTTP_Referer|ARGS "aromacc\.com" SecRule HTTP_Referer|ARGS "artark\.com" SecRule HTTP_Referer|ARGS "artlilei\.com" SecRule HTTP_Referer|ARGS "artsculpture\.org" SecRule HTTP_Referer|ARGS "aseman\.weblogs\.us" SecRule HTTP_Referer|ARGS "asian-4you\.net" SecRule HTTP_Referer|ARGS "asianbum\.com" SecRule HTTP_Referer|ARGS "asian-girls\.name" SecRule HTTP_Referer|ARGS "asian-girls-porn-sex\.com" SecRule HTTP_Referer|ARGS "asian-nude\.blogspot\.com" SecRule HTTP_Referer|ARGS "asian-sex-woman\.com" SecRule HTTP_Referer|ARGS "asian-trans\.net" SecRule HTTP_Referer|ARGS "asiantrans\.net" SecRule HTTP_Referer|ARGS "assparade\.com" SecRule HTTP_Referer|ARGS "ass-picture\.us" SecRule HTTP_Referer|ARGS "assserver\.com" SecRule HTTP_Referer|ARGS "ass-traffic\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "a-stories\.com" SecRule HTTP_Referer|ARGS "at-capstone\.com" SecRule HTTP_Referer|ARGS "atelebanon\.com" SecRule HTTP_Referer|ARGS "ath\.cx" SecRule HTTP_Referer|ARGS "athirst-for-tranquillity\.net" SecRule HTTP_Referer|ARGS "atkins-diet-center\.com" SecRule HTTP_Referer|ARGS "atkinsexpert\.com" SecRule HTTP_Referer|ARGS "atkpremium\.net" SecRule HTTP_Referer|ARGS "atkpremium\.org" SecRule HTTP_Referer|ARGS "atlanta2000\.org" SecRule HTTP_Referer|ARGS "atlas-pharmacy\.com" SecRule HTTP_Referer|ARGS "aubonpanier\.com" SecRule HTTP_Referer|ARGS "auctionmoneymakers\.com" SecRule HTTP_Referer|ARGS "auktions-uebersicht\.de" SecRule HTTP_Referer|ARGS "auslutschen\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "australia-online-travel\.com" SecRule HTTP_Referer|ARGS "austria-travels\.info" SecRule HTTP_Referer|ARGS "autodetailproducts\.com" SecRule HTTP_Referer|ARGS "autodirektversicherung\.com" SecRule HTTP_Referer|ARGS "autofinanzierung-autokredit\.de" SecRule HTTP_Referer|ARGS "autofinanzierung-zum-festzins\.de" SecRule HTTP_Referer|ARGS "autohandelsmarktplatz\.de" SecRule HTTP_Referer|ARGS "auto-insurance-links\.net" SecRule HTTP_Referer|ARGS "autokredit-autofinanzierung\.de" SecRule HTTP_Referer|ARGS "autokredit-tipp\.de" SecRule HTTP_Referer|ARGS "auto-loans-usa\.biz" SecRule HTTP_Referer|ARGS "automotive\.com" SecRule HTTP_Referer|ARGS "autumn-jade\.com" SecRule HTTP_Referer|ARGS "avon-one\.com" SecRule HTTP_Referer|ARGS "azgirlcam\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "azian\.org" SecRule HTTP_Referer|ARGS "azubiweb\.com" SecRule HTTP_Referer|ARGS "ba2000\.com" SecRule HTTP_Referer|ARGS "babes-d\.com" SecRule HTTP_Referer|ARGS "babes-plus\.com" SecRule HTTP_Referer|ARGS "babymarktplatz-aktiv\.de" SecRule HTTP_Referer|ARGS "baby-perfekt\.de" SecRule HTTP_Referer|ARGS "\.bac[0-9]\.com" SecRule HTTP_Referer|ARGS "\.bac8\.com" SecRule HTTP_Referer|ARGS "background-check\.info" SecRule HTTP_Referer|ARGS "backroom-facials\.150m\.com" SecRule HTTP_Referer|ARGS "back-room-facials\.angelcities\.com" SecRule HTTP_Referer|ARGS "backseatbangers" SecRule HTTP_Referer|ARGS "bad-movies\.net" SecRule HTTP_Referer|ARGS "bad-passion\.com" SecRule HTTP_Referer|ARGS "bahraichfun\.com" SecRule HTTP_Referer|ARGS "bali-dewadewi-tours\.com" SecRule HTTP_Referer|ARGS "balidiscovery\.org" SecRule HTTP_Referer|ARGS "bali-hotels\.co\.uk" SecRule HTTP_Referer|ARGS "balivillas\.net" SecRule HTTP_Referer|ARGS "balltaas\.com" SecRule HTTP_Referer|ARGS "baltikum-travel\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "bamfri\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "banialoba3w\.150m\.com" SecRule HTTP_Referer|ARGS "bankcards.nl" SecRule HTTP_Referer|ARGS "bannedhome\.com" SecRule HTTP_Referer|ARGS "banned-pics\.com" SecRule HTTP_Referer|ARGS "barcodes\.cn" SecRule HTTP_Referer|ARGS "barely-legald\.com" SecRule HTTP_Referer|ARGS "barelylegalgirlsex\.com" SecRule HTTP_Referer|ARGS "barely-legal-teenb\.com" SecRule HTTP_Referer|ARGS "bare\.org" SecRule HTTP_Referer|ARGS "bargainfindsonebay\.com" SecRule HTTP_Referer|ARGS "bargeld-tipp\.de" SecRule HTTP_Referer|ARGS "base-poker\.com" SecRule HTTP_Referer|ARGS "basi-musicali\.com" SecRule HTTP_Referer|ARGS "basketball--betting\.net" SecRule HTTP_Referer|ARGS "baskets-online\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "bast3\.ru" SecRule HTTP_Referer|ARGS "batukaru\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "bayofnoreturn\.com" SecRule HTTP_Referer|ARGS "bbwclips\.com" SecRule HTTP_Referer|ARGS "\bby\.ru\b" SecRule HTTP_Referer|ARGS "bccinet\.org" SecRule HTTP_Referer|ARGS "\.bda\.ru" SecRule HTTP_Referer|ARGS "\.bde\.gg" SecRule HTTP_Referer|ARGS "\.bde\.nr" SecRule HTTP_Referer|ARGS "\.bde\.tc" SecRule HTTP_Referer|ARGS "\.bde\.tp" SecRule HTTP_Referer|ARGS "bdsm-story\.blogspot\.com" SecRule HTTP_Referer|ARGS "beastiality-animal-sex-stories\.com" SecRule HTTP_Referer|ARGS "beastiality-stories\.net" SecRule HTTP_Referer|ARGS "beastsex-movies\.com" SecRule HTTP_Referer|ARGS "beauty-farm\.net" SecRule HTTP_Referer|ARGS "bedding-etc\.com" SecRule HTTP_Referer|ARGS "belinking\.com" SecRule HTTP_Referer|ARGS "belle-donne\.biz" SecRule HTTP_Referer|ARGS "belleragazze\.biz" SecRule HTTP_Referer|ARGS "belle-ragazze\.net" SecRule HTTP_Referer|ARGS "belle-ragazze\.org" SecRule HTTP_Referer|ARGS "belleragazze\.org" SecRule HTTP_Referer|ARGS "bellissime-donne\.com" SecRule HTTP_Referer|ARGS "bellissimedonne\.com" SecRule HTTP_Referer|ARGS "bellissime-donne\.net" SecRule HTTP_Referer|ARGS "bellissimedonne\.org" SecRule HTTP_Referer|ARGS "beltonen-logos-spel\.com" SecRule HTTP_Referer|ARGS "benessere\.us" SecRule HTTP_Referer|ARGS "berwickfoundation\.org" SecRule HTTP_Referer|ARGS "bestasianteens\.com" SecRule HTTP_Referer|ARGS "best-buy-cialis\.com" SecRule HTTP_Referer|ARGS "best-cell-phone-batteries\.info" SecRule HTTP_Referer|ARGS "best-cialis-source\.com" SecRule HTTP_Referer|ARGS "(best|play)-craps" SecRule HTTP_Referer|ARGS "best-deals-blackjack\.info" SecRule HTTP_Referer|ARGS "best-deals-casino\.info" SecRule HTTP_Referer|ARGS "best-deals-cheap-airline-tickets\.info" SecRule HTTP_Referer|ARGS "best-deals-diet\.info" SecRule HTTP_Referer|ARGS "best-deals-flowers\.info" SecRule HTTP_Referer|ARGS "best-deals-hotels\.info" SecRule HTTP_Referer|ARGS "best-deals-online-gambling\.info" SecRule HTTP_Referer|ARGS "best-deals-online-poker\.info" SecRule HTTP_Referer|ARGS "best-deals-poker\.info" SecRule HTTP_Referer|ARGS "best-deals-roulette\.info" SecRule HTTP_Referer|ARGS "best-deals-weight-loss\.info" SecRule HTTP_Referer|ARGS "bestdims\.com" SecRule HTTP_Referer|ARGS "bestdvdclubs\.com" SecRule HTTP_Referer|ARGS "best-e-site\.com" SecRule HTTP_Referer|ARGS "best-gambling\.biz" SecRule HTTP_Referer|ARGS "bestgamblinghouseonline\.com" SecRule HTTP_Referer|ARGS "besthandever\.com" SecRule HTTP_Referer|ARGS "best-high-speed-internet\.com" SecRule HTTP_Referer|ARGS "bestialitylinks\.org" SecRule HTTP_Referer|ARGS "bestiality-pics\.org" SecRule HTTP_Referer|ARGS "best-internet-bingo\.com" SecRule HTTP_Referer|ARGS "bestits\.net" SecRule HTTP_Referer|ARGS "bestlowmortgagerates" SecRule HTTP_Referer|ARGS "bestonline-medication\.com" SecRule HTTP_Referer|ARGS "bestonline-medication\.net" SecRule HTTP_Referer|ARGS "bestonline-shopping\.com" SecRule HTTP_Referer|ARGS "best-pharmacy\.us" SecRule HTTP_Referer|ARGS "bestpornhost\.com" SecRule HTTP_Referer|ARGS "best-result-fast\.com" SecRule HTTP_Referer|ARGS "bet-on-horseracing\.com" SecRule HTTP_Referer|ARGS "beverlyhillspimpandhos\.com" SecRule HTTP_Referer|ARGS "beverlyhillspimpsandhos\.com" SecRule HTTP_Referer|ARGS "\bgo\.ro\b" SecRule HTTP_Referer|ARGS "bierikiuetsch\.com" SecRule HTTP_Referer|ARGS "biexperience\.org" SecRule HTTP_Referer|ARGS "big-black-butts\.net" SecRule HTTP_Referer|ARGS "bigbras-club\.com" SecRule HTTP_Referer|ARGS "big-breast-success\.com" SecRule HTTP_Referer|ARGS "bigdig\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "big-fat-girls\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "big-hooters\.net" SecRule HTTP_Referer|ARGS "bigmag\.com\.ua" SecRule HTTP_Referer|ARGS "bigmoms\.com" SecRule HTTP_Referer|ARGS "bigmouthfuls\.com" SecRule HTTP_Referer|ARGS "big-natural-boobs\.us" SecRule HTTP_Referer|ARGS "big-naturals-4u\.com" SecRule HTTP_Referer|ARGS "big-rant\.com" SecRule HTTP_Referer|ARGS "\.bigsitecity\.com" SecRule HTTP_Referer|ARGS "bigtitchaz\.com" SecRule HTTP_Referer|ARGS "bigtitsroundasses\.com" SecRule HTTP_Referer|ARGS "bigyonet\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "bigyonet\.com" SecRule HTTP_Referer|ARGS "bildmitteilung\.us" SecRule HTTP_Referer|ARGS "billigfluege-billige-fluege\.de" SecRule HTTP_Referer|ARGS "bingo-net\.com" SecRule HTTP_Referer|ARGS "bio-snoop\.com" SecRule HTTP_Referer|ARGS "birds\.com.ru" SecRule HTTP_Referer|ARGS "birth-control-links\.com" SecRule HTTP_Referer|ARGS "biteenz\.com" SecRule HTTP_Referer|ARGS "bizhat\.com" SecRule HTTP_Referer|ARGS "bj-cas\.cn" SecRule HTTP_Referer|ARGS "bjerwai\.com" SecRule HTTP_Referer|ARGS "bj-fyhj\.com" SecRule HTTP_Referer|ARGS "bjgift\.com" SecRule HTTP_Referer|ARGS "bj-hchy\.com" SecRule HTTP_Referer|ARGS "bjkhp\.com" SecRule HTTP_Referer|ARGS "bjxhjy\.com" SecRule HTTP_Referer|ARGS "bla5\.com" SecRule HTTP_Referer|ARGS "black-4u.[a-z]{2,}" SecRule HTTP_Referer|ARGS "black-4u.*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "black-amateur-cock\.net" SecRule HTTP_Referer|ARGS "blackbusty\.com" SecRule HTTP_Referer|ARGS "black-dick-white-slut\.com" SecRule HTTP_Referer|ARGS "black-girls\.blowsearch\.ws" SecRule HTTP_Referer|ARGS "blackjack-123\.com" SecRule HTTP_Referer|ARGS "blackjack-21\.ws" SecRule HTTP_Referer|ARGS "black-jack-4u\.net" SecRule HTTP_Referer|ARGS "blackjack-4u\.net" SecRule HTTP_Referer|ARGS "blackjack-777\.net" SecRule HTTP_Referer|ARGS "blackjack777\.net" SecRule HTTP_Referer|ARGS "blackjack-8\.com" SecRule HTTP_Referer|ARGS "blackjack-dot\.com" SecRule HTTP_Referer|ARGS "blackjack\.fm" SecRule HTTP_Referer|ARGS "blackjack-game" SecRule HTTP_Referer|ARGS "blackjack-homepage\.com" SecRule HTTP_Referer|ARGS "blackjack-p\.com" SecRule HTTP_Referer|ARGS "blackjack-play-blackjack\.com" SecRule HTTP_Referer|ARGS "blackjacksite\.net" SecRule HTTP_Referer|ARGS "black-jack-trx\.com" SecRule HTTP_Referer|ARGS "blackjack-winner\.net" SecRule HTTP_Referer|ARGS "blackmanhiggs\.com" SecRule HTTP_Referer|ARGS "black-poker.*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "blahblah\.tk" SecRule HTTP_Referer|ARGS "blevensdamman\.com" SecRule HTTP_Referer|ARGS "blk-web\.de" SecRule HTTP_Referer|ARGS "bllogspot\.com" SecRule HTTP_Referer|ARGS "bloglabs\.biz" SecRule HTTP_Referer|ARGS "blogman\.biz" SecRule HTTP_Referer|ARGS "blogmen\.net" SecRule HTTP_Referer|ARGS "blogspam\.org" SecRule HTTP_Referer|ARGS "blog-tips\.com" SecRule HTTP_Referer|ARGS "blonde-pussy\.us" SecRule HTTP_Referer|ARGS "blondes2fuck\.com" SecRule HTTP_Referer|ARGS "blonde-video\.us" SecRule HTTP_Referer|ARGS "blonde-xxx\.us" SecRule HTTP_Referer|ARGS "blownapart\.com" SecRule HTTP_Referer|ARGS "blumengruss-onlineshop\.de" SecRule HTTP_Referer|ARGS "blumenshop-versand\.de" SecRule HTTP_Referer|ARGS "bnetsol\.com" SecRule HTTP_Referer|ARGS "body-jewelry\.reestr\.net" SecRule HTTP_Referer|ARGS "bodyjock\.com" SecRule HTTP_Referer|ARGS "body-piercing\.softinterop\.com" SecRule HTTP_Referer|ARGS "boldbdsm.nl" SecRule HTTP_Referer|ARGS "bondage-story\.blogspot\.com" SecRule HTTP_Referer|ARGS "bon-referencement\.com" SecRule HTTP_Referer|ARGS "boobmorning\.com" SecRule HTTP_Referer|ARGS "boobspost\.com" SecRule HTTP_Referer|ARGS "booktextone\.com" SecRule HTTP_Referer|ARGS "boom\.ru" SecRule HTTP_Referer|ARGS "\.realestateseller\.net" SecRule HTTP_Referer|ARGS "bootyquake\.com" SecRule HTTP_Referer|ARGS "borindonaragara\.com" SecRule HTTP_Referer|ARGS "boysgonebad\.net" SecRule HTTP_Referer|ARGS "boys-sex\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "brazilbang\.biz" SecRule HTTP_Referer|ARGS "brd-frauen.de" SecRule HTTP_Referer|ARGS "breast-augmentation\.top-big-tits\.com" SecRule HTTP_Referer|ARGS "breastfeeding\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "briana-banks-dot\.com" SecRule HTTP_Referer|ARGS "british-hardcore\.net" SecRule HTTP_Referer|ARGS "bszz\.com" SecRule HTTP_Referer|ARGS "btnetsol\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "budobytes\.com" SecRule HTTP_Referer|ARGS "bueroversand-xxl\.de" SecRule HTTP_Referer|ARGS "bugaboo-stroller\.com" SecRule HTTP_Referer|ARGS "build-penis\.com" SecRule HTTP_Referer|ARGS "bukakke\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "bulkcrawler\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "bulkemailsoft\.com" SecRule HTTP_Referer|ARGS "burningcar\.net" SecRule HTTP_Referer|ARGS "burundonamagara\.com" SecRule HTTP_Referer|ARGS "businessgrants\.biz" SecRule HTTP_Referer|ARGS "business-grants\.org" SecRule HTTP_Referer|ARGS "business-web-site\.net" SecRule HTTP_Referer|ARGS "bustyangelique\.com" SecRule HTTP_Referer|ARGS "bustydustystash\.com" SecRule HTTP_Referer|ARGS "bustykerrymarie\.com" SecRule HTTP_Referer|ARGS "busty-models\.us" SecRule HTTP_Referer|ARGS "butalbital\.org" SecRule HTTP_Referer|ARGS "buy-2005" SecRule HTTP_Referer|ARGS "buy-2005\.com" SecRule HTTP_Referer|ARGS "buy-2005-top\.com" SecRule HTTP_Referer|ARGS "buy-adult-sex-toys\.com" SecRule HTTP_Referer|ARGS "buy-adult-toys\.biz" SecRule HTTP_Referer|ARGS "buy-car-insurance-4-us\.com" SecRule HTTP_Referer|ARGS "buy-ceramics\.com" SecRule HTTP_Referer|ARGS "buycheapcialis" SecRule HTTP_Referer|ARGS "buy-cheapest-lexapro-side-effects-noprescription\.biz" SecRule HTTP_Referer|ARGS "buycheappills\.net" SecRule HTTP_Referer|ARGS "buy-cialis\.ws" SecRule HTTP_Referer|ARGS "buy-computer-memory\.net" SecRule HTTP_Referer|ARGS "buy-computer\.us" SecRule HTTP_Referer|ARGS "buy-diclofenac-online" SecRule HTTP_Referer|ARGS "buy-discount-airline-tickets\.com" SecRule HTTP_Referer|ARGS "buy-drugs-online\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "buyhgh" SecRule HTTP_Referer|ARGS "buy-laptop\.biz" SecRule HTTP_Referer|ARGS "buylipitor" SecRule HTTP_Referer|ARGS "buyprilosec" SecRule HTTP_Referer|ARGS "buy-rx-usa\.com" SecRule HTTP_Referer|ARGS "buy-sex-toys\.net" SecRule HTTP_Referer|ARGS "buystuffpayless\.com" SecRule HTTP_Referer|ARGS "buyzocor" SecRule HTTP_Referer|ARGS "b-witchedcentral\.co\.uk" SecRule HTTP_Referer|ARGS "byronbayinternet\.com" SecRule HTTP_Referer|ARGS "ca-america\.com" SecRule HTTP_Referer|ARGS "calendari-donne\.com" SecRule HTTP_Referer|ARGS "calendaridonne\.com" SecRule HTTP_Referer|ARGS "calendari-donne\.net" SecRule HTTP_Referer|ARGS "calendaridonne\.net" SecRule HTTP_Referer|ARGS "callingcardchoice\.com" SecRule HTTP_Referer|ARGS "cambridgetherapynotebook\.co\.uk" SecRule HTTP_Referer|ARGS "camemberts\.org" SecRule HTTP_Referer|ARGS "camfun24\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "canadianlabels\.net" SecRule HTTP_Referer|ARGS "cantwell2000\.com" SecRule HTTP_Referer|ARGS "canzoni\.cc" SecRule HTTP_Referer|ARGS "canzoni-italiane\.com" SecRule HTTP_Referer|ARGS "canzoni-italiane\.net" SecRule HTTP_Referer|ARGS "canzoni-italiane\.org" SecRule HTTP_Referer|ARGS "canzoni-karaoke\.com" SecRule HTTP_Referer|ARGS "canzoni-mp3\.com" SecRule HTTP_Referer|ARGS "canzoni-mp3\.us" SecRule HTTP_Referer|ARGS "canzoni-musica\.com" SecRule HTTP_Referer|ARGS "canzonisanremo\.com" SecRule HTTP_Referer|ARGS "canzonistraniere\.com" SecRule HTTP_Referer|ARGS "capital-credit-cards\.com" SecRule HTTP_Referer|ARGS "capitalraiser\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "capquella\.com" SecRule HTTP_Referer|ARGS "captain-stabbin-4u\.com" SecRule HTTP_Referer|ARGS "captain-stabbin\.blogspot\.com" SecRule HTTP_Referer|ARGS "card-games-tfx\.com" SecRule HTTP_Referer|ARGS "cardsloansmortgages\.com" SecRule HTTP_Referer|ARGS "car-financing-low-rates\.biz" SecRule HTTP_Referer|ARGS "car-fuck\.net" SecRule HTTP_Referer|ARGS "caribbean-poker-web\.com" SecRule HTTP_Referer|ARGS "carnalhost\.com" SecRule HTTP_Referer|ARGS "carnumbers\.ru" SecRule HTTP_Referer|ARGS "carpia\.net" SecRule HTTP_Referer|ARGS "carpiar\.net" SecRule HTTP_Referer|ARGS "car-rental-links\.com" SecRule HTTP_Referer|ARGS "car-rentals-2go\.com" SecRule HTTP_Referer|ARGS "car-rental-search\.com" SecRule HTTP_Referer|ARGS "carriere.ca" SecRule HTTP_Referer|ARGS "carrot.no" SecRule HTTP_Referer|ARGS "cars-links\.com" SecRule HTTP_Referer|ARGS "cartoni-animati\.com" SecRule HTTP_Referer|ARGS "cartonierotici\.com" SecRule HTTP_Referer|ARGS "cartonigiapponesi\.com" SecRule HTTP_Referer|ARGS "cartoni-hentai\.com" SecRule HTTP_Referer|ARGS "cartoni-hentai\.net" SecRule HTTP_Referer|ARGS "cartonihentai\.net" SecRule HTTP_Referer|ARGS "cartoni-hentai\.org" SecRule HTTP_Referer|ARGS "cartoni-porno\.com" SecRule HTTP_Referer|ARGS "cartopia\.com" SecRule HTTP_Referer|ARGS "\.cas44\.com" SecRule HTTP_Referer|ARGS "cas7\.net" SecRule HTTP_Referer|ARGS "cashadvanceclub\.com" SecRule HTTP_Referer|ARGS "cash-advance-quick\.com" SecRule HTTP_Referer|ARGS "cash-net\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "cash-net\.biz" SecRule HTTP_Referer|ARGS "casino\.150m\.com" SecRule HTTP_Referer|ARGS "casino747\.net" SecRule HTTP_Referer|ARGS "casino-attraction\.com" SecRule HTTP_Referer|ARGS "casino-bet-casino\.com" SecRule HTTP_Referer|ARGS "casino-cash\.net" SecRule HTTP_Referer|ARGS "casinochique\.com" SecRule HTTP_Referer|ARGS ".*-casino\.com" SecRule HTTP_Referer|ARGS "ca-s-ino\.com" SecRule HTTP_Referer|ARGS "casino\.com" SecRule HTTP_Referer|ARGS "casino-en-ligne\.fr\.vu" SecRule HTTP_Referer|ARGS "casinoequipmentsalesandrental\.com" SecRule HTTP_Referer|ARGS "casino-games-4-us\.com" SecRule HTTP_Referer|ARGS "casino-games-i\.com" SecRule HTTP_Referer|ARGS "casino-game-trx\.com" SecRule HTTP_Referer|ARGS "casino-gaming-trx\.com" SecRule HTTP_Referer|ARGS "casino-in-linea\.it\.st" SecRule HTTP_Referer|ARGS "casino-jp\.com" SecRule HTTP_Referer|ARGS "casinolasvegas-online\.com" SecRule HTTP_Referer|ARGS "casino\.menegum\.co\.uk" SecRule HTTP_Referer|ARGS "casino-online-i\.com" SecRule HTTP_Referer|ARGS "casino-online-on-line\.com" SecRule HTTP_Referer|ARGS "casino-onnet-bonus\.com" SecRule HTTP_Referer|ARGS "casino-on-net\.com" SecRule HTTP_Referer|ARGS "casinoplaces\.net" SecRule HTTP_Referer|ARGS "casinos-8\.com" SecRule HTTP_Referer|ARGS "casinos-jp\.com" SecRule HTTP_Referer|ARGS "casino-slot\.ws" SecRule HTTP_Referer|ARGS "casinos-plus\.com" SecRule HTTP_Referer|ARGS "casinotrixx\.com" SecRule HTTP_Referer|ARGS "(casino)+[\w\-_.]*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "casino-wins\.net" SecRule HTTP_Referer|ARGS "castingagentur2004\.de" SecRule HTTP_Referer|ARGS "catchathief\.org" SecRule HTTP_Referer|ARGS "cbitech\.com" SecRule HTTP_Referer|ARGS "ccbill\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "ccie130\.com" SecRule HTTP_Referer|ARGS "ccie-ccnie\.com" SecRule HTTP_Referer|ARGS "ccna130\.com" SecRule HTTP_Referer|ARGS "ccna-ccna\.com" SecRule HTTP_Referer|ARGS "ccnp130\.com" SecRule HTTP_Referer|ARGS "ccnp-ccnp\.com" SecRule HTTP_Referer|ARGS "cdshop-guenstig\.de" SecRule HTTP_Referer|ARGS "cds-xxl\.de" SecRule HTTP_Referer|ARGS "celebrexonline\.us" SecRule HTTP_Referer|ARGS "celebritylust\.blog-city\.com" SecRule HTTP_Referer|ARGS "celebritypics\.ws" SecRule HTTP_Referer|ARGS "celebskin\.com" SecRule HTTP_Referer|ARGS "celebtastic\.com" SecRule HTTP_Referer|ARGS "cell-phone-accessories-dot\.com" SecRule HTTP_Referer|ARGS "ceramics-store\.com" SecRule HTTP_Referer|ARGS "certificationking\.net" SecRule HTTP_Referer|ARGS "certified-new-autos\.com" SecRule HTTP_Referer|ARGS "certified-new-cars\.com" SecRule HTTP_Referer|ARGS "certified-new-suvs\.com" SecRule HTTP_Referer|ARGS "certified-used-cars\.com" SecRule HTTP_Referer|ARGS "certified-used-suvs\.com" SecRule HTTP_Referer|ARGS "cesew\.org" SecRule HTTP_Referer|ARGS "charisma\.dyndns\.dk" SecRule HTTP_Referer|ARGS "chat-l\.de" SecRule HTTP_Referer|ARGS "chatten\.bilder-j\.de" SecRule HTTP_Referer|ARGS "chauffeurtours\.co\.uk" SecRule HTTP_Referer|ARGS "cheapacyclovir\.com" SecRule HTTP_Referer|ARGS "cheap-adult-sex-toys\.com" SecRule HTTP_Referer|ARGS "cheap-airfare-airline-ticket\.com" SecRule HTTP_Referer|ARGS "cheap-celebrex-prescriptions\.com" SecRule HTTP_Referer|ARGS "cheap-christmas-gifts\.co\.uk" SecRule HTTP_Referer|ARGS "cheap-cigarettes\.com" SecRule HTTP_Referer|ARGS "cheapcodeine\.biz" SecRule HTTP_Referer|ARGS "cheap-computers\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "cheapdrugpharmacy\.com" SecRule HTTP_Referer|ARGS "cheaper-digital-cameras\.uk\.com" SecRule HTTP_Referer|ARGS "cheaper-loans\.eu\.com" SecRule HTTP_Referer|ARGS "cheapest-pills-online\.com" SecRule HTTP_Referer|ARGS "cheapgenericsoma\.info" SecRule HTTP_Referer|ARGS "cheap-laptop-notebook\.netdims\.com" SecRule HTTP_Referer|ARGS "cheap-online-pharmacy\.org" SecRule HTTP_Referer|ARGS "cheap-pills-online\.com" SecRule HTTP_Referer|ARGS "cheapsomaonline\.biz" SecRule HTTP_Referer|ARGS "cheaptabs\.envy\.nu" SecRule HTTP_Referer|ARGS "cheap-web-hosting-companies\.com" SecRule HTTP_Referer|ARGS "checkmeds\.com" SecRule HTTP_Referer|ARGS "\.checkproxy\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "cherrybrady\.com" SecRule HTTP_Referer|ARGS "chickz\.com" SecRule HTTP_Referer|ARGS "chillout\.bpa\.nu" SecRule HTTP_Referer|ARGS "chinaaircatering\.com" SecRule HTTP_Referer|ARGS "chinagoldcoininc\.com" SecRule HTTP_Referer|ARGS "chineseapesattack" SecRule HTTP_Referer|ARGS "chloesworld\.com" SecRule HTTP_Referer|ARGS "choose-online-university\.com" SecRule HTTP_Referer|ARGS "chrislaker\.co\.uk" SecRule HTTP_Referer|ARGS "christmas-casino\.spb\.ru" SecRule HTTP_Referer|ARGS "cialisapcalis\.com" SecRule HTTP_Referer|ARGS "cialis-buy\.com" SecRule HTTP_Referer|ARGS "cialis-dot\.com" SecRule HTTP_Referer|ARGS "cialis-express\.com" SecRule HTTP_Referer|ARGS "cialis\.homeip\.net" SecRule HTTP_Referer|ARGS "cialisnetwork\.com" SecRule HTTP_Referer|ARGS "\.bravehost\.com" SecRule HTTP_Referer|ARGS "cialis-weekend-pills\.com" SecRule HTTP_Referer|ARGS "ciscochina\.com" SecRule HTTP_Referer|ARGS "clamber\.de" SecRule HTTP_Referer|ARGS "clanbov\.com" SecRule HTTP_Referer|ARGS "classifiche-italiane\.org" SecRule HTTP_Referer|ARGS "classifiche-musicali\.com" SecRule HTTP_Referer|ARGS "classifichemusicali\.com" SecRule HTTP_Referer|ARGS "classifiche-musicali\.net" SecRule HTTP_Referer|ARGS "classifiche-musicali\.org" SecRule HTTP_Referer|ARGS "claudiachristian\.co\.uk" SecRule HTTP_Referer|ARGS "claypokerchips-claypokerchips\.com" SecRule HTTP_Referer|ARGS "cleanadulthost\.com" SecRule HTTP_Referer|ARGS "cleannbright\.co\.uk" SecRule HTTP_Referer|ARGS "click-or-not\.de" SecRule HTTP_Referer|ARGS "click-poker\.com" SecRule HTTP_Referer|ARGS "clickscoring\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "clophillac\.org\.uk" SecRule HTTP_Referer|ARGS "closed-network\.com" SecRule HTTP_Referer|ARGS "club69\.net" SecRule HTTP_Referer|ARGS "clubatlantiscasino\.com" SecRule HTTP_Referer|ARGS "club-nouvelle-mini\.com" SecRule HTTP_Referer|ARGS "club-online-poker" SecRule HTTP_Referer|ARGS "clubstic\.com" SecRule HTTP_Referer|ARGS "cmeontv\.de" SecRule HTTP_Referer|ARGS "cnbjflower\.com" SecRule HTTP_Referer|ARGS "cngangqiu\.com" SecRule HTTP_Referer|ARGS "cntoplead\.com" SecRule HTTP_Referer|ARGS "coed-girls\.com" SecRule HTTP_Referer|ARGS "coffee-delivered\.com" SecRule HTTP_Referer|ARGS "cokemusic\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "colkk\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "college-girl-pic\.com" SecRule HTTP_Referer|ARGS "college-links\.net" SecRule HTTP_Referer|ARGS "college-scholarships-grants\.biz" SecRule HTTP_Referer|ARGS "colunn\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "combaltec\.com" SecRule HTTP_Referer|ARGS "comeback\.com" SecRule HTTP_Referer|ARGS "cometojapan\.com" SecRule HTTP_Referer|ARGS "cometomalaysia\.com" SecRule HTTP_Referer|ARGS "cometosingapore\.com" SecRule HTTP_Referer|ARGS "cometothailand\.com" SecRule HTTP_Referer|ARGS "commtec.ch" SecRule HTTP_Referer|ARGS "comnaked-old-women\.com" SecRule HTTP_Referer|ARGS "compare-counseling" SecRule HTTP_Referer|ARGS "compare-mortgage-rates" SecRule HTTP_Referer|ARGS "completelycars\.com" SecRule HTTP_Referer|ARGS "completelyherbal\.com" SecRule HTTP_Referer|ARGS "comptershops-online\.de" SecRule HTTP_Referer|ARGS "computer-onlinebestellung\.de" SecRule HTTP_Referer|ARGS "computer-und-erotische-spiele-download\.com" SecRule HTTP_Referer|ARGS "computerversand-xxl\.de" SecRule HTTP_Referer|ARGS "condodream\.com" SecRule HTTP_Referer|ARGS "condosee\.com" SecRule HTTP_Referer|ARGS "conjuratia\.com" SecRule HTTP_Referer|ARGS "consolidate-debt-usa\.net" SecRule HTTP_Referer|ARGS "consolidation-elimination\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "consolidation-loans\.com" SecRule HTTP_Referer|ARGS "container-partner\.de" SecRule HTTP_Referer|ARGS "cool-extreme\.com" SecRule HTTP_Referer|ARGS "cool-mix\.com" SecRule HTTP_Referer|ARGS "coolp\.biz" SecRule HTTP_Referer|ARGS "coolp\.net" SecRule HTTP_Referer|ARGS "cool-poker\.com" SecRule HTTP_Referer|ARGS "coolp\.org" SecRule HTTP_Referer|ARGS "coresleep\.com" SecRule HTTP_Referer|ARGS "cosmeticsurgery\.us" SecRule HTTP_Referer|ARGS "cosmeticsurgery\.us\.com" SecRule HTTP_Referer|ARGS "cost-of-penis-enlargement-surgery" SecRule HTTP_Referer|ARGS "couponmountain\.com" SecRule HTTP_Referer|ARGS "cover-your-feet\.com" SecRule HTTP_Referer|ARGS "cowrie\.com.ru" SecRule HTTP_Referer|ARGS "crazyfrog\.wtf\.la" SecRule HTTP_Referer|ARGS "creamfilledholes\.biz" SecRule HTTP_Referer|ARGS "creamlog.org" SecRule HTTP_Referer|ARGS "creditcardpost\.com" SecRule HTTP_Referer|ARGS "credit-cards-credit-cards-credit-cards\.net" SecRule HTTP_Referer|ARGS "credit-dreams\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "credit-factor\.com" SecRule HTTP_Referer|ARGS "credit-links\.net" SecRule HTTP_Referer|ARGS "credit-loans-2005\.com" SecRule HTTP_Referer|ARGS "credit-repair\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "creditrepairsoft\.com" SecRule HTTP_Referer|ARGS "credit-report-links\.net" SecRule HTTP_Referer|ARGS "creditsharpie\.com" SecRule HTTP_Referer|ARGS "crepesuzette\." SecRule HTTP_Referer|ARGS "crepesuzette\.com" SecRule HTTP_Referer|ARGS "crescentarian\.net" SecRule HTTP_Referer|ARGS "crpublish\.com" SecRule HTTP_Referer|ARGS "crusingforsex.co.uk" SecRule HTTP_Referer|ARGS "c-start\.net" SecRule HTTP_Referer|ARGS "cum-facials\.us" SecRule HTTP_Referer|ARGS "cumfiesta-4u\.com" SecRule HTTP_Referer|ARGS "cumfietavideos\.com" SecRule HTTP_Referer|ARGS "cumlogin\.com" SecRule HTTP_Referer|ARGS "cumshot42\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "cureage\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "customerhandshaker\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "customer-reviews\.org" SecRule HTTP_Referer|ARGS "cutpricepills\.com" SecRule HTTP_Referer|ARGS "cyberfreehost\.com" SecRule HTTP_Referer|ARGS "cycatki\.com" SecRule HTTP_Referer|ARGS "cyclo-cross\.co\.uk" SecRule HTTP_Referer|ARGS "cykanax\.com" SecRule HTTP_Referer|ARGS "dad-daughter-incest\.com" SecRule HTTP_Referer|ARGS "daiiuvwx\.com" SecRule HTTP_Referer|ARGS "dailyliving\.info" SecRule HTTP_Referer|ARGS "dailyorbit\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "dallmayr\.de" SecRule HTTP_Referer|ARGS "damianer\.top-100\.pl" SecRule HTTP_Referer|ARGS "danni\.com" SecRule HTTP_Referer|ARGS "darest\.de" SecRule HTTP_Referer|ARGS "darkangelclan\.com" SecRule HTTP_Referer|ARGS "darkprofits.co.uk" SecRule HTTP_Referer|ARGS "darzgx\.com" SecRule HTTP_Referer|ARGS "datashaping\.com" SecRule HTTP_Referer|ARGS "datestop\.net" SecRule HTTP_Referer|ARGS "dating999" SecRule HTTP_Referer|ARGS "dating999\.com" SecRule HTTP_Referer|ARGS "dating-choice\.com" SecRule HTTP_Referer|ARGS "dating-harmony\.com" SecRule HTTP_Referer|ARGS "dating-online-dating\.org" SecRule HTTP_Referer|ARGS "dating-porn-sluts\.com" SecRule HTTP_Referer|ARGS "dating-service-dating\.com" SecRule HTTP_Referer|ARGS "dating-services-dating-service\.com" SecRule HTTP_Referer|ARGS "davidtaylor\.topcities\.com" SecRule HTTP_Referer|ARGS "day4sex\.com" SecRule HTTP_Referer|ARGS "deals-4you\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "debtconsolidationfirm\.net" SecRule HTTP_Referer|ARGS "debt-consolidation-i" SecRule HTTP_Referer|ARGS "debt-consolidation-i\.biz" SecRule HTTP_Referer|ARGS "debt-consolidation-kick-a\.com" SecRule HTTP_Referer|ARGS "debtconsolidationloans" SecRule HTTP_Referer|ARGS "debt-consolidation-low-rates\.biz" SecRule HTTP_Referer|ARGS "debt-consolidation-now-online\.com" SecRule HTTP_Referer|ARGS "debtconsolidationusa\.org" SecRule HTTP_Referer|ARGS "debt-disappear\.com" SecRule HTTP_Referer|ARGS "debt-help-bill-consolidation-elimination\.com" SecRule HTTP_Referer|ARGS "debtmanagementcompanyonline\.com" SecRule HTTP_Referer|ARGS "debt-solution-tips\.com" SecRule HTTP_Referer|ARGS "dedichepersonali\.com" SecRule HTTP_Referer|ARGS "deep-ice\.com" SecRule HTTP_Referer|ARGS "defunctportal\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "de\.hm" SecRule HTTP_Referer|ARGS "deikmann\.de" SecRule HTTP_Referer|ARGS "dentalinsurancehealth\.com" SecRule HTTP_Referer|ARGS "dental-insurance-plan\.freeservers\.com" SecRule HTTP_Referer|ARGS "dental-plan-source" SecRule HTTP_Referer|ARGS "department-storez\.com" SecRule HTTP_Referer|ARGS "desex.nl" SecRule HTTP_Referer|ARGS "design4u\.ws" SecRule HTTP_Referer|ARGS "desiraesworld\.com" SecRule HTTP_Referer|ARGS "de\.sr" SecRule HTTP_Referer|ARGS "deutschlandweite-immobilienangebote\.de" SecRule HTTP_Referer|ARGS "devilofnights\.net" SecRule HTTP_Referer|ARGS "devilofnights\.org" SecRule HTTP_Referer|ARGS "devonanal\.com" SecRule HTTP_Referer|ARGS "devon-daniels\.com" SecRule HTTP_Referer|ARGS "dia-host\.com" SecRule HTTP_Referer|ARGS "dianepoppos\.com" SecRule HTTP_Referer|ARGS "diarypeople\.com" SecRule HTTP_Referer|ARGS "dick-deputy\.com" SecRule HTTP_Referer|ARGS "diecastdot\.com" SecRule HTTP_Referer|ARGS "dieta\.cc" SecRule HTTP_Referer|ARGS "dieta-dimagrante\.net" SecRule HTTP_Referer|ARGS "dieta-mediterranea\.net" SecRule HTTP_Referer|ARGS "dieta-zona\.com" SecRule HTTP_Referer|ARGS "diet-doctor\.net" SecRule HTTP_Referer|ARGS "diete\.bz" SecRule HTTP_Referer|ARGS "diete-dimagranti\.com" SecRule HTTP_Referer|ARGS "diethost\.net" SecRule HTTP_Referer|ARGS "dieting-review\.com" SecRule HTTP_Referer|ARGS "diet.org.ru" SecRule HTTP_Referer|ARGS "dietpage\.net" SecRule HTTP_Referer|ARGS "dietpatchformula\.com" SecRule HTTP_Referer|ARGS "diet-pill" SecRule HTTP_Referer|ARGS "diet-pills-now" SecRule HTTP_Referer|ARGS "dietrest\.com" SecRule HTTP_Referer|ARGS "diets-health\.com" SecRule HTTP_Referer|ARGS "diets-plan\.net" SecRule HTTP_Referer|ARGS "dietway\.net" SecRule HTTP_Referer|ARGS "digitale-teile\.de" SecRule HTTP_Referer|ARGS "digital-projector\.net" SecRule HTTP_Referer|ARGS "digitaltwist\.co\.uk" SecRule HTTP_Referer|ARGS "directcarrental\.com" SecRule HTTP_Referer|ARGS "direct-contact\.com" SecRule HTTP_Referer|ARGS "directcti\.com" SecRule HTTP_Referer|ARGS "direct-deals-for-you\.info" SecRule HTTP_Referer|ARGS "directrape\.com" SecRule HTTP_Referer|ARGS "directringtones\.com" SecRule HTTP_Referer|ARGS "direct-tv-for-free\.com" SecRule HTTP_Referer|ARGS "direct-tv-online\.com" SecRule HTTP_Referer|ARGS "dirty-story\.blogspot\.com" SecRule HTTP_Referer|ARGS "discount-airfares-guide\.com" SecRule HTTP_Referer|ARGS "discount-cheap-dental-insurance\.com" SecRule HTTP_Referer|ARGS "discount-life-insurance\.us" SecRule HTTP_Referer|ARGS "discountprinterrefill\.com" SecRule HTTP_Referer|ARGS "discount-store\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "discover-credit-card" SecRule HTTP_Referer|ARGS "discoveryofusa\.com" SecRule HTTP_Referer|ARGS "dish-network\.org" SecRule HTTP_Referer|ARGS "dish-network-w\.com" SecRule HTTP_Referer|ARGS "disigncn\.com" SecRule HTTP_Referer|ARGS "disney-hentai\.org" SecRule HTTP_Referer|ARGS "divorce-links\.com" SecRule HTTP_Referer|ARGS "djpritchard\.com" SecRule HTTP_Referer|ARGS "dlctc\.com" SecRule HTTP_Referer|ARGS "dnpose\.com" SecRule HTTP_Referer|ARGS "dns110\.com" SecRule HTTP_Referer|ARGS "dns2008\.cn" SecRule HTTP_Referer|ARGS "dogfartmovieclips\.com" SecRule HTTP_Referer|ARGS "dogolz\.de" SecRule HTTP_Referer|ARGS "domkino\.com\.ua" SecRule HTTP_Referer|ARGS "donne-belle\.net" SecRule HTTP_Referer|ARGS "donnebelle\.net" SecRule HTTP_Referer|ARGS "donne\.bz" SecRule HTTP_Referer|ARGS "donne-famose\.biz" SecRule HTTP_Referer|ARGS "donnefamose\.biz" SecRule HTTP_Referer|ARGS "donnegrasse\.org" SecRule HTTP_Referer|ARGS "donnemature\.biz" SecRule HTTP_Referer|ARGS "donnemuscolose\.com" SecRule HTTP_Referer|ARGS "donne-muscolose\.net" SecRule HTTP_Referer|ARGS "donne-muscolose\.org" SecRule HTTP_Referer|ARGS "donnenere\.com" SecRule HTTP_Referer|ARGS "donne-nere\.net" SecRule HTTP_Referer|ARGS "donnenere\.net" SecRule HTTP_Referer|ARGS "donne-nere\.org" SecRule HTTP_Referer|ARGS "donne-nude\.biz" SecRule HTTP_Referer|ARGS "donnenude\.biz" SecRule HTTP_Referer|ARGS "donne-porche\.com" SecRule HTTP_Referer|ARGS "donneporche\.org" SecRule HTTP_Referer|ARGS "donnesexy\.org" SecRule HTTP_Referer|ARGS "donne-vogliose\.com" SecRule HTTP_Referer|ARGS "donnevogliose\.net" SecRule HTTP_Referer|ARGS "donnevogliose\.org" SecRule HTTP_Referer|ARGS "donshardcoreporn\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "doobu\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "doobu\.com" SecRule HTTP_Referer|ARGS "doo\.pl" SecRule HTTP_Referer|ARGS "doorway-page-software" SecRule HTTP_Referer|ARGS "dostweb\.com" SecRule HTTP_Referer|ARGS "dotcomup\.com" SecRule HTTP_Referer|ARGS "doubleyoudoubleyou\.com" SecRule HTTP_Referer|ARGS "download-slotmachines\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "downloadzipcode\.com" SecRule HTTP_Referer|ARGS "dr\.ag" SecRule HTTP_Referer|ARGS "dragonball-porno\.com" SecRule HTTP_Referer|ARGS "dragonballporno\.net" SecRule HTTP_Referer|ARGS "dragonball-x\.biz" SecRule HTTP_Referer|ARGS "dragonballx\.cc" SecRule HTTP_Referer|ARGS "dragonball-xxx\.biz" SecRule HTTP_Referer|ARGS "dragonballxxx\.biz" SecRule HTTP_Referer|ARGS "draufgeschissen\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "dressagehorseinternational\.co\.uk" SecRule HTTP_Referer|ARGS "drive-backup\.com" SecRule HTTP_Referer|ARGS "drochka\.com" SecRule HTTP_Referer|ARGS "drtushy\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "drug-enzyte" SecRule HTTP_Referer|ARGS "drugsexperts\.com" SecRule HTTP_Referer|ARGS "drugstore-online\.us" SecRule HTTP_Referer|ARGS "drugstore\.st" SecRule HTTP_Referer|ARGS "drunk-girls-flashing\.com" SecRule HTTP_Referer|ARGS "drunk-girls-party\.us" SecRule HTTP_Referer|ARGS "\.drunk-mom-sex\.com" SecRule HTTP_Referer|ARGS "dtiserv2\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "dunecliffesaunton\.co\.uk" SecRule HTTP_Referer|ARGS "dvd2\.us" SecRule HTTP_Referer|ARGS "dvd-copier\.info" SecRule HTTP_Referer|ARGS "dvd-downloads.nl" SecRule HTTP_Referer|ARGS "dvddownloads.nl" SecRule HTTP_Referer|ARGS "dvd-home-theatre\.com" SecRule HTTP_Referer|ARGS "dvd-top-shop\.info" SecRule HTTP_Referer|ARGS "dvdwizardpro\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "dwoq\.com" SecRule HTTP_Referer|ARGS "e40\.nl" SecRule HTTP_Referer|ARGS "easy-application-credit-cards\.com" SecRule HTTP_Referer|ARGS "easygo\.hn\.org" SecRule HTTP_Referer|ARGS "easy-loan\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "easyrecorder\.com" SecRule HTTP_Referer|ARGS "easyseek\.us" SecRule HTTP_Referer|ARGS "ebanking\.info" SecRule HTTP_Referer|ARGS "ebaybusiness\.net" SecRule HTTP_Referer|ARGS "e-best-poker\.com" SecRule HTTP_Referer|ARGS "ebloggy\.com" SecRule HTTP_Referer|ARGS "ebonyarchives\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "ebony-girls\.angelcities\.com" SecRule HTTP_Referer|ARGS "ebony-xxx\.us" SecRule HTTP_Referer|ARGS "ebookers\.co\.uk" SecRule HTTP_Referer|ARGS "e-bookszone\.com" SecRule HTTP_Referer|ARGS "e-casino-bonus\.com" SecRule HTTP_Referer|ARGS "ecblast\.com" SecRule HTTP_Referer|ARGS "eccentrix\.com/members/casinotips" SecRule HTTP_Referer|ARGS "echofourdesign\.com" SecRule HTTP_Referer|ARGS "e-cialis\.net" SecRule HTTP_Referer|ARGS "eclexion\.net" SecRule HTTP_Referer|ARGS "ecologix\.co\.uk" SecRule HTTP_Referer|ARGS "e-credit-card-debt\.com" SecRule HTTP_Referer|ARGS "eddiereva\.com" SecRule HTTP_Referer|ARGS "e-debt-consolidation-loans\.com" SecRule HTTP_Referer|ARGS "e-dental-insurance-plans" SecRule HTTP_Referer|ARGS "e-dental-plans\.com" SecRule HTTP_Referer|ARGS "edietplans\.net" SecRule HTTP_Referer|ARGS "e-discus\.com" SecRule HTTP_Referer|ARGS "edmontgomeryministries\.org" SecRule HTTP_Referer|ARGS "edpowerspasswords\.com" SecRule HTTP_Referer|ARGS "edrugstore\.md" SecRule HTTP_Referer|ARGS "education-line\.com" SecRule HTTP_Referer|ARGS "edwardbaskett\.com" SecRule HTTP_Referer|ARGS "effexor\.cc" SecRule HTTP_Referer|ARGS "effexor-web\.com" SecRule HTTP_Referer|ARGS "e-fioricet\.com" SecRule HTTP_Referer|ARGS "e-free-credit-reports\.com" SecRule HTTP_Referer|ARGS "eggesfordhotel\.co\.uk" SecRule HTTP_Referer|ARGS "egygift\.com" SecRule HTTP_Referer|ARGS "e-hoodia-gordonii\.com" SecRule HTTP_Referer|ARGS "einfach-wunschgewicht\.com" SecRule HTTP_Referer|ARGS "elcenter-s\.ru" SecRule HTTP_Referer|ARGS "eldorado\.com\.ua" SecRule HTTP_Referer|ARGS "electricscooterland\.com" SecRule HTTP_Referer|ARGS "electromark-uk\.co\.uk" SecRule HTTP_Referer|ARGS "electronics-info\.com" SecRule HTTP_Referer|ARGS "elegant-candles\.com" SecRule HTTP_Referer|ARGS "elektronikshop-xxl\.de" SecRule HTTP_Referer|ARGS "e-lemonlaw\.com" SecRule HTTP_Referer|ARGS "elfundelf\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "elite-change\.com" SecRule HTTP_Referer|ARGS "elitecities\.com" SecRule HTTP_Referer|ARGS "emailsafety\.net" SecRule HTTP_Referer|ARGS "emedia-omni\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "emedici\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "emmasarah\.com" SecRule HTTP_Referer|ARGS "emmss\.com" SecRule HTTP_Referer|ARGS "enacre\.net" SecRule HTTP_Referer|ARGS "e-news\.host\.sk" SecRule HTTP_Referer|ARGS "enhancementenlargement\.net" SecRule HTTP_Referer|ARGS "enhancement-male\.com" SecRule HTTP_Referer|ARGS "enhancementmale\.net" SecRule HTTP_Referer|ARGS "enhancement-natural\.com" SecRule HTTP_Referer|ARGS "enhancementnatural\.com" SecRule HTTP_Referer|ARGS "enhancementnatural\.us" SecRule HTTP_Referer|ARGS "enhancementpenis\.biz" SecRule HTTP_Referer|ARGS "enhancementpenis\.com" SecRule HTTP_Referer|ARGS "enjoy-blackjack\.com" SecRule HTTP_Referer|ARGS "\.enlargementenhancement\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "enlargementenhancement\.com" SecRule HTTP_Referer|ARGS "enlargementenhancement\.us" SecRule HTTP_Referer|ARGS "enlargement-for-penis\.com" SecRule HTTP_Referer|ARGS "enlargement-male\.biz" SecRule HTTP_Referer|ARGS "enlargementmale\.net" SecRule HTTP_Referer|ARGS "enlargementmale\.org" SecRule HTTP_Referer|ARGS "enlargementnatural\.biz" SecRule HTTP_Referer|ARGS "enlarg.*enhanc.*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "envoyer-des-fleurs\.com" SecRule HTTP_Referer|ARGS "enzyte-commercial" SecRule HTTP_Referer|ARGS "e-online-bingo\.com" SecRule HTTP_Referer|ARGS "eonsystems\.com" SecRule HTTP_Referer|ARGS "e-order-propecia\.com" SecRule HTTP_Referer|ARGS "epaycash\.com" SecRule HTTP_Referer|ARGS "e-personalinjurylawyers" SecRule HTTP_Referer|ARGS "e-personalinjurylawyers\.com" SecRule HTTP_Referer|ARGS "e--pics\.com" SecRule HTTP_Referer|ARGS "e-pills-buy\.com" SecRule HTTP_Referer|ARGS "e-play-bingo\.com" SecRule HTTP_Referer|ARGS "e-poker-888\.com" SecRule HTTP_Referer|ARGS "e-poker-games\.info" SecRule HTTP_Referer|ARGS "erbium12\.com" SecRule HTTP_Referer|ARGS "erosway\.com" SecRule HTTP_Referer|ARGS "erotic4free\.net" SecRule HTTP_Referer|ARGS "erotic-free\.com" SecRule HTTP_Referer|ARGS "erotic-lesbian-story\.blogspot\.com" SecRule HTTP_Referer|ARGS "erotic-video\.us" SecRule HTTP_Referer|ARGS "erotische-geschichten-portal\.com" SecRule HTTP_Referer|ARGS "erotischkontakt\.com" SecRule HTTP_Referer|ARGS "escort-agency-paris\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "escort-links\.net" SecRule HTTP_Referer|ARGS "escort-service-paris\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "escorts-links\.com" SecRule HTTP_Referer|ARGS "escort-woman\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "esesso-gratis\.com" SecRule HTTP_Referer|ARGS "esmartdesign\.com" SecRule HTTP_Referer|ARGS "e-southbeachdiet\.com" SecRule HTTP_Referer|ARGS "esport3\.com" SecRule HTTP_Referer|ARGS "ethixsouthwest\.com" SecRule HTTP_Referer|ARGS "e-top-pharmacy\.com" SecRule HTTP_Referer|ARGS "e-tutor\.com" SecRule HTTP_Referer|ARGS "eurotexans\.com" SecRule HTTP_Referer|ARGS "eurowins\.net" SecRule HTTP_Referer|ARGS "evananderson\.topcities\.com" SecRule HTTP_Referer|ARGS "evanstonpl\.org" SecRule HTTP_Referer|ARGS "event-kalendarium\.de" SecRule HTTP_Referer|ARGS "evenway\.net" SecRule HTTP_Referer|ARGS "everyvoice\.net" SecRule HTTP_Referer|ARGS "e-virtual-casino\.com" SecRule HTTP_Referer|ARGS "evromaster\.ru" SecRule HTTP_Referer|ARGS "ewilla\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "exclaim4creditcardprocessingmerchantaccount\.com" SecRule HTTP_Referer|ARGS "exdrawings\.com" SecRule HTTP_Referer|ARGS "exitq\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "exoticdvds\.co\.uk" SecRule HTTP_Referer|ARGS "exoticmoms\.com" SecRule HTTP_Referer|ARGS "expert-gambling\.com" SecRule HTTP_Referer|ARGS "expoze\.com" SecRule HTTP_Referer|ARGS "extrasms\.de" SecRule HTTP_Referer|ARGS "extreme-rape\.org" SecRule HTTP_Referer|ARGS "extreme-sex\.org" SecRule HTTP_Referer|ARGS "f2g\.net" SecRule HTTP_Referer|ARGS "f2s\.be" SecRule HTTP_Referer|ARGS "fabida\.net" SecRule HTTP_Referer|ARGS "fabulos\.de" SecRule HTTP_Referer|ARGS "fabuloussextoys\.com" SecRule HTTP_Referer|ARGS "facial-skin-care-center\.com" SecRule HTTP_Referer|ARGS "fakoli\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "familydiet\.org" SecRule HTTP_Referer|ARGS "family-incest-stories\.com" SecRule HTTP_Referer|ARGS "family-incest\.us" SecRule HTTP_Referer|ARGS "famousass\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "famousppl\.me\.uk" SecRule HTTP_Referer|ARGS "fantasyfootballsportsbook\.com" SecRule HTTP_Referer|ARGS "\.FAQserv\.com" SecRule HTTP_Referer|ARGS "farm-beastiality\.com" SecRule HTTP_Referer|ARGS "farmsx\.com" SecRule HTTP_Referer|ARGS "fast-cash-quick-money-easy-loan\.com" SecRule HTTP_Referer|ARGS "fast-fioricet\.com" SecRule HTTP_Referer|ARGS "fast-mortgage-4-u\.com" SecRule HTTP_Referer|ARGS "fast-news-servers\.com" SecRule HTTP_Referer|ARGS "fat-cash\.com" SecRule HTTP_Referer|ARGS "fateback\.com" SecRule HTTP_Referer|ARGS "fat-lesbians\.net" SecRule HTTP_Referer|ARGS "fat-pussy-sex\.net" SecRule HTTP_Referer|ARGS "fatty-liver\.cn" SecRule HTTP_Referer|ARGS "fatwarfare\.com" SecRule HTTP_Referer|ARGS "favilon\.net" SecRule HTTP_Referer|ARGS "fbc-media\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "fda\.com\.cn" SecRule HTTP_Referer|ARGS "fearcrow\.com" SecRule HTTP_Referer|ARGS "federalgovernmentgrants\.net" SecRule HTTP_Referer|ARGS "feetslave.nl" SecRule HTTP_Referer|ARGS "feidenfurniture\.com" SecRule HTTP_Referer|ARGS "femaledrive\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "female-drive-dysfunction\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "female-dysfunction\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "female-enhancement\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "femalelibido" SecRule HTTP_Referer|ARGS "female-libido" SecRule HTTP_Referer|ARGS "female-orgasms\.org" SecRule HTTP_Referer|ARGS "femaleviagra\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "femto\.static\.net" SecRule HTTP_Referer|ARGS "ficken.d4f\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "fidelityfunding\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "fidelityfunding\.net" SecRule HTTP_Referer|ARGS "fielit\.de" SecRule HTTP_Referer|ARGS "figa\.nu" SecRule HTTP_Referer|ARGS "film456\.com" SecRule HTTP_Referer|ARGS "film-porno\.us" SecRule HTTP_Referer|ARGS "filthserver\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "filthserver\.com" SecRule HTTP_Referer|ARGS "final-fantasy-hentai\.org" SecRule HTTP_Referer|ARGS "finance-world\.net" SecRule HTTP_Referer|ARGS "finanzen-marktplatz\.de" SecRule HTTP_Referer|ARGS "findbestpills" SecRule HTTP_Referer|ARGS "findbestpills\.com" SecRule HTTP_Referer|ARGS "findbestshop\.com" SecRule HTTP_Referer|ARGS "findbookmakers\.com" SecRule HTTP_Referer|ARGS "find-cheap-dental-plans\.com" SecRule HTTP_Referer|ARGS "finddatingsites\.com" SecRule HTTP_Referer|ARGS "findish\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "find-it-buy-it\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "find-lesbian-porn\.com" SecRule HTTP_Referer|ARGS "find-physician\.com" SecRule HTTP_Referer|ARGS "findsexxx\.us" SecRule HTTP_Referer|ARGS "find-u-that-mortgage\.com" SecRule HTTP_Referer|ARGS "findyouruni\.com" SecRule HTTP_Referer|ARGS "finger-bobs\.com" SecRule HTTP_Referer|ARGS "fioricet4u" SecRule HTTP_Referer|ARGS "fioricet\.batcave\.net" SecRule HTTP_Referer|ARGS "fioricet\.bravehost\.com" SecRule HTTP_Referer|ARGS "fioricet-dot\.com" SecRule HTTP_Referer|ARGS "fioricet-online-here\.com" SecRule HTTP_Referer|ARGS "fioricet\.st" SecRule HTTP_Referer|ARGS "fioricet-web\.com" SecRule HTTP_Referer|ARGS "firstchoicebanksandpremiercredit\.com" SecRule HTTP_Referer|ARGS "first-poker\.com" SecRule HTTP_Referer|ARGS "firsttimeaddition\.com" SecRule HTTP_Referer|ARGS "first-time-story\.blogspot\.com" SecRule HTTP_Referer|ARGS "firsttimeteadrinker\.com" SecRule HTTP_Referer|ARGS "fishing\.net.ru" SecRule HTTP_Referer|ARGS "fishoilmiracle\.com" SecRule HTTP_Referer|ARGS "fitness-links\.net" SecRule HTTP_Referer|ARGS "fitnessx\.net" SecRule HTTP_Referer|ARGS "flafeber\.com" SecRule HTTP_Referer|ARGS "flatbedshipping\.com" SecRule HTTP_Referer|ARGS "flatwonkers\.com" SecRule HTTP_Referer|ARGS "flecka\.org" SecRule HTTP_Referer|ARGS "fleshlight\.org" SecRule HTTP_Referer|ARGS "fleshlight\.ro" SecRule HTTP_Referer|ARGS "flexeril-web\.com" SecRule HTTP_Referer|ARGS "flirt08\.de" SecRule HTTP_Referer|ARGS "flowertobj\.com" SecRule HTTP_Referer|ARGS "fly-sky\.com" SecRule HTTP_Referer|ARGS "football--betting\.net" SecRule HTTP_Referer|ARGS "football-betting-nfl\.com" SecRule HTTP_Referer|ARGS "forceful\.de" SecRule HTTP_Referer|ARGS "foreskin-restoration\.net" SecRule HTTP_Referer|ARGS "forex\.inc\.ru" SecRule HTTP_Referer|ARGS "forexintroducer\.com" SecRule HTTP_Referer|ARGS "forex-online-now\.com" SecRule HTTP_Referer|ARGS "forlovedones\.com" SecRule HTTP_Referer|ARGS "formula42\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "fortisenterprises\.co\.uk" SecRule HTTP_Referer|ARGS "foto-gay\.us" SecRule HTTP_Referer|ARGS "foto-porno\.us" SecRule HTTP_Referer|ARGS "foto-porno\.ws" SecRule HTTP_Referer|ARGS "frangelicasplace\.org" SecRule HTTP_Referer|ARGS "frankpictures\.com" SecRule HTTP_Referer|ARGS "freak-view\.com" SecRule HTTP_Referer|ARGS "freakycheats\.com" SecRule HTTP_Referer|ARGS "free-adult-chat-room\.com" SecRule HTTP_Referer|ARGS "free-adult-check\.com" SecRule HTTP_Referer|ARGS "freeadult\.de" SecRule HTTP_Referer|ARGS "freeanalsex.nl" SecRule HTTP_Referer|ARGS "\.freebb\.com" SecRule HTTP_Referer|ARGS "free-blackjack-game\.us" SecRule HTTP_Referer|ARGS "free-britney-spears-nude\.biz" SecRule HTTP_Referer|ARGS "free-casino-games" SecRule HTTP_Referer|ARGS "free-casino-games-000" SecRule HTTP_Referer|ARGS "freecreampie\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "free-debt-consolidation-online\.us" SecRule HTTP_Referer|ARGS "freedvdplayer\.cjb\.net" SecRule HTTP_Referer|ARGS "freeeads\.co\.uk" SecRule HTTP_Referer|ARGS "free-fast\.net" SecRule HTTP_Referer|ARGS "free-games-links\.com" SecRule HTTP_Referer|ARGS "free-gay-video-clip\.com" SecRule HTTP_Referer|ARGS "freegovmoney\.net" SecRule HTTP_Referer|ARGS "freegovmoney\.us" SecRule HTTP_Referer|ARGS "free-hilton-paris-sex-video\.com" SecRule HTTP_Referer|ARGS "free-horoscopes\.biz" SecRule HTTP_Referer|ARGS "freehostingpeople\.com" SecRule HTTP_Referer|ARGS "freehustlersex\.com" SecRule HTTP_Referer|ARGS "free-incest-stories-site\.com" SecRule HTTP_Referer|ARGS "freeminimacs\.com" SecRule HTTP_Referer|ARGS "free-net-sex\.com" SecRule HTTP_Referer|ARGS "freenetshopper\.com" SecRule HTTP_Referer|ARGS "freenudecelebrity\.net" SecRule HTTP_Referer|ARGS "freenudegallery\.org" SecRule HTTP_Referer|ARGS "free--online--poker" SecRule HTTP_Referer|ARGS "free-online-poker" SecRule HTTP_Referer|ARGS "free--online-poker\.com" SecRule HTTP_Referer|ARGS "free--online-poker\.us" SecRule HTTP_Referer|ARGS "free-paris-nikki-hilton\.blogspot\.com" SecRule HTTP_Referer|ARGS "freepicsdaily\.com" SecRule HTTP_Referer|ARGS "free-poker-download-i\.com" SecRule HTTP_Referer|ARGS "free-poker-great-value\.com" SecRule HTTP_Referer|ARGS "free-poker-rooms\.us" SecRule HTTP_Referer|ARGS "freepornday\.com" SecRule HTTP_Referer|ARGS "free-preview.nl" SecRule HTTP_Referer|ARGS "free-satellite-tv-directv-nocable\.com" SecRule HTTP_Referer|ARGS "free-satellite-tv-now\.com" SecRule HTTP_Referer|ARGS "free-sex\.com" SecRule HTTP_Referer|ARGS "freeteenpicsandmovies\.com" SecRule HTTP_Referer|ARGS "free-teens-galleries\.com" SecRule HTTP_Referer|ARGS "free-texas-holdem" SecRule HTTP_Referer|ARGS "free-texashold-em\.us" SecRule HTTP_Referer|ARGS "free-texasholdem\.us" SecRule HTTP_Referer|ARGS "free-traffic-generation\.com" SecRule HTTP_Referer|ARGS "freeweb-hosting\.com" SecRule HTTP_Referer|ARGS "freewebpage\.org" SecRule HTTP_Referer|ARGS "freewebs\.com" SecRule HTTP_Referer|ARGS "freewhileshopping\.com" SecRule HTTP_Referer|ARGS "freexxxstuff\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "freshgirls\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "freshsexhosting\.com" SecRule HTTP_Referer|ARGS "friko\.pl" SecRule HTTP_Referer|ARGS "fsearch\.dtdns\.net" SecRule HTTP_Referer|ARGS "fuck-animals\.com" SecRule HTTP_Referer|ARGS "fuckfick\.net" SecRule HTTP_Referer|ARGS "full-access\.net" SecRule HTTP_Referer|ARGS "fumetti-porno\.org" SecRule HTTP_Referer|ARGS "fumettiporno\.org" SecRule HTTP_Referer|ARGS "fungays\.com" SecRule HTTP_Referer|ARGS "furrios\.de" SecRule HTTP_Referer|ARGS "furry-kinks-looking\.com" SecRule HTTP_Referer|ARGS "furry-kinks-looking\.net" SecRule HTTP_Referer|ARGS "future-2000\.net" SecRule HTTP_Referer|ARGS "fw-lan\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "f-z-a\.com" SecRule HTTP_Referer|ARGS "g4h5\.com" SecRule HTTP_Referer|ARGS "gadless\.com" SecRule HTTP_Referer|ARGS "gaggingwhores\.net" SecRule HTTP_Referer|ARGS "gaggingwhores\.org" SecRule HTTP_Referer|ARGS "gagnerargent\.com" SecRule HTTP_Referer|ARGS "gainmoresize\.com" SecRule HTTP_Referer|ARGS "galleries4free\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "gallerylisting\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "galofu\.com" SecRule HTTP_Referer|ARGS "gals4all\.com" SecRule HTTP_Referer|ARGS "galsonbed\.com" SecRule HTTP_Referer|ARGS "gambleguru\.net" SecRule HTTP_Referer|ARGS "gamble-on-football-online\.com" SecRule HTTP_Referer|ARGS "gambling-a\.us" SecRule HTTP_Referer|ARGS "gambling-card\.ws" SecRule HTTP_Referer|ARGS "gambling-casinos-trx\.com" SecRule HTTP_Referer|ARGS "gamblingguidance\.co\.uk" SecRule HTTP_Referer|ARGS "gambling-homepage\.com" SecRule HTTP_Referer|ARGS "gamblingonline.nl" SecRule HTTP_Referer|ARGS "gambling\Sgames.cc" SecRule HTTP_Referer|ARGS "gamefinder\.de" SecRule HTTP_Referer|ARGS "gamersclub.nl" SecRule HTTP_Referer|ARGS "games-advanced\.de" SecRule HTTP_Referer|ARGS "gamessites\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "ganbarufanworks.org" SecRule HTTP_Referer|ARGS "gangbangbusgallery\.com" SecRule HTTP_Referer|ARGS "gang-rape\.org" SecRule HTTP_Referer|ARGS "gargzdai\.net" SecRule HTTP_Referer|ARGS "garment-china\.com" SecRule HTTP_Referer|ARGS "gartenshopper\.de" SecRule HTTP_Referer|ARGS "garthfans\.co\.uk" SecRule HTTP_Referer|ARGS "gau42\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "gay1ncest\.com" SecRule HTTP_Referer|ARGS "gay-asian-porn\.com" SecRule HTTP_Referer|ARGS "gay-b\.com" SecRule HTTP_Referer|ARGS "gay-boy.nl" SecRule HTTP_Referer|ARGS "gay-boy\.us" SecRule HTTP_Referer|ARGS "gayfamilyincest\.net" SecRule HTTP_Referer|ARGS "gayfunplaces\.com" SecRule HTTP_Referer|ARGS "gay-male-story\.blogspot\.com" SecRule HTTP_Referer|ARGS "gay-nude\.us" SecRule HTTP_Referer|ARGS "gaypixpost.co.uk" SecRule HTTP_Referer|ARGS "gay-sex-videos\.com" SecRule HTTP_Referer|ARGS "gays-porno-men-twinks-boys-sex\.biz" SecRule HTTP_Referer|ARGS "gays-sex-gay-sex-gays\.us" SecRule HTTP_Referer|ARGS "gayteen" SecRule HTTP_Referer|ARGS "gay-twinks-sex\.com" SecRule HTTP_Referer|ARGS "gayx\.us" SecRule HTTP_Referer|ARGS "student.*loans.*4free" SecRule HTTP_Referer|ARGS "always-credit\.com" SecRule HTTP_Referer|ARGS "great-money\.com" SecRule HTTP_Referer|ARGS "auto-loan-calculator" SecRule HTTP_Referer|ARGS "\.credit-dreams\.com" SecRule HTTP_Referer|ARGS "cash-money\.html" SecRule HTTP_Referer|ARGS "\.gb\.com" SecRule HTTP_Referer|ARGS "gdgc\.org" SecRule HTTP_Referer|ARGS "\.guarantee-money\.com" SecRule HTTP_Referer|ARGS "\.thebrainstormer\.com" SecRule HTTP_Referer|ARGS "\.op-clan\.com" SecRule HTTP_Referer|ARGS "\.yelucie\.com" SecRule HTTP_Referer|ARGS "\.excellent-health\.com" SecRule HTTP_Referer|ARGS "\.computerxchange\.com" SecRule HTTP_Referer|ARGS "\.lilaleemcrightrealty\.com" SecRule HTTP_Referer|ARGS "\.zindagi\.us" SecRule HTTP_Referer|ARGS "\.unitedinchristchurch\.org" SecRule HTTP_Referer|ARGS "\.sheratonnorthcharleston\.com" SecRule HTTP_Referer|ARGS "\.buy-pharmacy-pills\.com" SecRule HTTP_Referer|ARGS "\.conjuratia\.com/" SecRule HTTP_Referer|ARGS "\.health-livening\.com" SecRule HTTP_Referer|ARGS "onlycelebs\.typepad\.com" SecRule HTTP_Referer|ARGS "now-cash\.com" SecRule HTTP_Referer|ARGS "\.strega\.us" SecRule HTTP_Referer|ARGS "\.freakycheats\.com" SecRule HTTP_Referer|ARGS "\.uaeecommerce\.com" SecRule HTTP_Referer|ARGS "\.feedmelinks\.com" SecRule HTTP_Referer|ARGS "\.meta-find\.us" SecRule HTTP_Referer|ARGS "\.american-casino\.ws" SecRule HTTP_Referer|ARGS "\.bingo-casino\.net" SecRule HTTP_Referer|ARGS "\.bingo-game-trx\.com" SecRule HTTP_Referer|ARGS "\.bingo-net\.com" SecRule HTTP_Referer|ARGS "\.6q\.org" SecRule HTTP_Referer|ARGS "geenslip.nl" SecRule HTTP_Referer|ARGS "geile-wijven\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "gelago\.de" SecRule HTTP_Referer|ARGS "gem2\.de" SecRule HTTP_Referer|ARGS "gemtienda\.co\.uk" SecRule HTTP_Referer|ARGS "generic-propecia\.net" SecRule HTTP_Referer|ARGS "generic-viagra.biz" SecRule HTTP_Referer|ARGS "genimat\.220v\.org" SecRule HTTP_Referer|ARGS "genimat\.cjb\.net" SecRule HTTP_Referer|ARGS "geocities\.com/alexgolddphumanrbriar" SecRule HTTP_Referer|ARGS "geocities\.com/avbmaxtirodpaulmatt" SecRule HTTP_Referer|ARGS "geocities\.com/brandtdleffmatthias7" SecRule HTTP_Referer|ARGS "geocities\.com/cclibrannar_rover" SecRule HTTP_Referer|ARGS "geocities\.com/constpolonskaalniko7" SecRule HTTP_Referer|ARGS "geocities\.com/forestavmiagdust" SecRule HTTP_Referer|ARGS "geocities\.com/free_satellite_tv_dish_system" SecRule HTTP_Referer|ARGS "geocities\.com/gehentaiqrst" SecRule HTTP_Referer|ARGS "geocities\.com/gematureqrst" SecRule HTTP_Referer|ARGS "geocities\.com/gerapeqrst" SecRule HTTP_Referer|ARGS "geocities\.com/ofconvbdemikqfolium" SecRule HTTP_Referer|ARGS "geocities\.com/pashkabandtvcom" SecRule HTTP_Referer|ARGS "geocities\.com/pautovalexasha_kagal" SecRule HTTP_Referer|ARGS "geocities\.com/reutovoalexeypetrovseverin5" SecRule HTTP_Referer|ARGS "geocities\.com/timryancompassmedius" SecRule HTTP_Referer|ARGS "germanyvacations\.net" SecRule HTTP_Referer|ARGS "gesundheitsshop-kosmetik\.de" SecRule HTTP_Referer|ARGS "gesundheit-total\.com" SecRule HTTP_Referer|ARGS "getaprescription\.net" SecRule HTTP_Referer|ARGS "get-cell-phone-accessories\.com" SecRule HTTP_Referer|ARGS "getdomainsandhosting\.com" SecRule HTTP_Referer|ARGS "get-free-catalogs\.com" SecRule HTTP_Referer|ARGS "get-freetrial\.us" SecRule HTTP_Referer|ARGS "get-hardcore-sex\.com" SecRule HTTP_Referer|ARGS "gethelp24x7\.net" SecRule HTTP_Referer|ARGS "get-insurance-quotes\.com" SecRule HTTP_Referer|ARGS "getmoregiveless\.com" SecRule HTTP_Referer|ARGS "getrxscripts\.biz" SecRule HTTP_Referer|ARGS "get-satellite-tv-dish\.com" SecRule HTTP_Referer|ARGS "getstarted24x7\.net" SecRule HTTP_Referer|ARGS "get-your-dish-tv\.info" SecRule HTTP_Referer|ARGS "getyourlyrics\.com" SecRule HTTP_Referer|ARGS "get-zoo\.com" SecRule HTTP_Referer|ARGS "gfind\.de" SecRule HTTP_Referer|ARGS "gfy\.com" SecRule HTTP_Referer|ARGS "gofuckyourself\.com" SecRule HTTP_Referer|ARGS "ghettoinc\.com" SecRule HTTP_Referer|ARGS "giantipps\.de" SecRule HTTP_Referer|ARGS "gifs-clipart-smiley\.de" SecRule HTTP_Referer|ARGS "giochi-hentai\.com" SecRule HTTP_Referer|ARGS "giochi-online\.us" SecRule HTTP_Referer|ARGS "giochix\.com" SecRule HTTP_Referer|ARGS "girls-get-crazy\.org" SecRule HTTP_Referer|ARGS "girlshost\.net" SecRule HTTP_Referer|ARGS "girltime.co.uk" SecRule HTTP_Referer|ARGS "giveramp\.com" SecRule HTTP_Referer|ARGS "give-u-the-perfect-mortgage\.com" SecRule HTTP_Referer|ARGS "glendajackson\.co\.uk" SecRule HTTP_Referer|ARGS "global-verreisen\.de" SecRule HTTP_Referer|ARGS "globalwebbrain\.com" SecRule HTTP_Referer|ARGS "gloryhole-girls\.angelcities\.com" SecRule HTTP_Referer|ARGS "glory-vision\.com" SecRule HTTP_Referer|ARGS "glucophagepharmacy\.com" SecRule HTTP_Referer|ARGS "goapplyonline\.com" SecRule HTTP_Referer|ARGS "godere\.org" SecRule HTTP_Referer|ARGS "godwebdesign\.com" SecRule HTTP_Referer|ARGS "gofolks\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "gogito\.com" SecRule HTTP_Referer|ARGS "gogof-ck\.com" SecRule HTTP_Referer|ARGS "gojerk\.com" SecRule HTTP_Referer|ARGS "gokkastemulator\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "goldpills\.net" SecRule HTTP_Referer|ARGS "golf-equipment\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "gomvents\.com" SecRule HTTP_Referer|ARGS "gongi\.pl" SecRule HTTP_Referer|ARGS "goodlife2000-geheimtipp\.com" SecRule HTTP_Referer|ARGS "goodsexy\.com" SecRule HTTP_Referer|ARGS "goodtv\.cn" SecRule HTTP_Referer|ARGS "google163\.net" SecRule HTTP_Referer|ARGS "google8\.net" SecRule HTTP_Referer|ARGS "gorilka\.atspace\.com" SecRule HTTP_Referer|ARGS "gotooa\.com" SecRule HTTP_Referer|ARGS "gotsw\.net" SecRule HTTP_Referer|ARGS "gourmondo\.de" SecRule HTTP_Referer|ARGS "govermentgrants\.net" SecRule HTTP_Referer|ARGS "governmentalgrants\.com" SecRule HTTP_Referer|ARGS "government-federal-grants\.com" SecRule HTTP_Referer|ARGS "governmentfederalgrants\.com" SecRule HTTP_Referer|ARGS "government--grant\.com" SecRule HTTP_Referer|ARGS "government-grants\.org" SecRule HTTP_Referer|ARGS "governmentgrantsresources\.com" SecRule HTTP_Referer|ARGS "governmentgrants\.tv" SecRule HTTP_Referer|ARGS "government-grants\.ws" SecRule HTTP_Referer|ARGS "governmentgrants\.ws" SecRule HTTP_Referer|ARGS "granadasexi\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "grannypictgp\.com" SecRule HTTP_Referer|ARGS "grannysexthumbs\.com" SecRule HTTP_Referer|ARGS "grants\.biz" SecRule HTTP_Referer|ARGS "grantseekerpro" SecRule HTTP_Referer|ARGS "gratisanaal.nl" SecRule HTTP_Referer|ARGS "gratispartnersuche\.com" SecRule HTTP_Referer|ARGS "gratissexdate.nl" SecRule HTTP_Referer|ARGS "great-cialis\.com" SecRule HTTP_Referer|ARGS "great-dish-tv-deals\.info" SecRule HTTP_Referer|ARGS "greatnow\.com" SecRule HTTP_Referer|ARGS "greecehotels-discount\.com" SecRule HTTP_Referer|ARGS "green-tx\.com" SecRule HTTP_Referer|ARGS "greenwood\.ddns\.ms" SecRule HTTP_Referer|ARGS "group-eurosex\.com" SecRule HTTP_Referer|ARGS "growshopalien\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "growtech\.cn" SecRule HTTP_Referer|ARGS "growth-hormone\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "guardami\.org" SecRule HTTP_Referer|ARGS "guenstige-krankenversicherung\.com" SecRule HTTP_Referer|ARGS "guenstige-onlineshops\.de" SecRule HTTP_Referer|ARGS "guenstige-sportartikel\.de" SecRule HTTP_Referer|ARGS "guenstige-versicherungstarife\.de" SecRule HTTP_Referer|ARGS "gunit\.gotdns\.com" SecRule HTTP_Referer|ARGS "guttermag\.com" SecRule HTTP_Referer|ARGS "hair-loss-cure\.net" SecRule HTTP_Referer|ARGS "hair-loss-cure-x\.com" SecRule HTTP_Referer|ARGS "hairy-pussy-sex\.net" SecRule HTTP_Referer|ARGS "hallo-tierfreund\.de" SecRule HTTP_Referer|ARGS "handjoblessons\.org" SecRule HTTP_Referer|ARGS "hand-job\.us" SecRule HTTP_Referer|ARGS "handmade2000\.co\.uk" SecRule HTTP_Referer|ARGS "handsm\.servehttp\.com" SecRule HTTP_Referer|ARGS "handwerksartikel-xxl\.de" SecRule HTTP_Referer|ARGS "handy-klingeltoene\.eu\.tp" SecRule HTTP_Referer|ARGS "handy-sms.biz" SecRule HTTP_Referer|ARGS "handysprueche\.de" SecRule HTTP_Referer|ARGS "handytone\.us" SecRule HTTP_Referer|ARGS "hangchen\.cn" SecRule HTTP_Referer|ARGS "hangchen\.com" SecRule HTTP_Referer|ARGS "happyagency\.com" SecRule HTTP_Referer|ARGS "happy-shopping-online\.com" SecRule HTTP_Referer|ARGS "hard-boys\.com" SecRule HTTP_Referer|ARGS "hardcorecash\.net" SecRule HTTP_Referer|ARGS "hardcore-jpg\.com" SecRule HTTP_Referer|ARGS "hardcore-junky\.us" SecRule HTTP_Referer|ARGS "hardcore-pictures\.us" SecRule HTTP_Referer|ARGS "hardcore-porn-links\.com" SecRule HTTP_Referer|ARGS "hardcore-pussy\.us" SecRule HTTP_Referer|ARGS "hardcore-sex\.bz" SecRule HTTP_Referer|ARGS "hardcore-video\.us" SecRule HTTP_Referer|ARGS "hard-sex-teen\.com" SecRule HTTP_Referer|ARGS "hasslerenterprises\.net" SecRule HTTP_Referer|ARGS "hasslerenterprises\.org" SecRule HTTP_Referer|ARGS "hautesavoieimmobilier\.com" SecRule HTTP_Referer|ARGS "hchcinc\.com" SecRule HTTP_Referer|ARGS "hdic\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "hdic\.net" SecRule HTTP_Referer|ARGS "hdic\.org" SecRule HTTP_Referer|ARGS "headachetreatment\.net" SecRule HTTP_Referer|ARGS "healhome\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "healthdangers\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "healthmore\.net" SecRule HTTP_Referer|ARGS "health-pills\.net" SecRule HTTP_Referer|ARGS "health-pills-online\.com" SecRule HTTP_Referer|ARGS "healthrules\.org" SecRule HTTP_Referer|ARGS "heartbeatofhealing\.org" SecRule HTTP_Referer|ARGS "helpful-forum\.com" SecRule HTTP_Referer|ARGS "helpful-pills-blog\.com" SecRule HTTP_Referer|ARGS "henrythehunk\.com" SecRule HTTP_Referer|ARGS "hentai-anime\.us" SecRule HTTP_Referer|ARGS "hentaigratis\.net" SecRule HTTP_Referer|ARGS "hentai-gratis\.us" SecRule HTTP_Referer|ARGS "hentai-hard\.com" SecRule HTTP_Referer|ARGS "hentaimanga\.us" SecRule HTTP_Referer|ARGS "hentaiplayground\.com" SecRule HTTP_Referer|ARGS "hentai-porno\.us" SecRule HTTP_Referer|ARGS "hentaix\.net" SecRule HTTP_Referer|ARGS "hentai-xxx\.us" SecRule HTTP_Referer|ARGS "hentaixxx\.us" SecRule HTTP_Referer|ARGS "hentay\.us" SecRule HTTP_Referer|ARGS "herbal-source\.net" SecRule HTTP_Referer|ARGS "hermosa\.us" SecRule HTTP_Referer|ARGS "herpies\.net" SecRule HTTP_Referer|ARGS "heydo\.com" SecRule HTTP_Referer|ARGS "hghadvisor\.com" SecRule HTTP_Referer|ARGS "hghplanet\.com" SecRule HTTP_Referer|ARGS "hgxweb\.de" SecRule HTTP_Referer|ARGS "\.hidden-place\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "hi-finder\.com" SecRule HTTP_Referer|ARGS "highheelsmodels4fun\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "highprofitclub\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "highprofitclub\.com" SecRule HTTP_Referer|ARGS "high-risk-merchant-account\.org" SecRule HTTP_Referer|ARGS "hillsweb\.com" SecRule HTTP_Referer|ARGS "hilton-nicky-paris\.blogspot\.com" SecRule HTTP_Referer|ARGS "hilton-video" SecRule HTTP_Referer|ARGS "hion\.cn" SecRule HTTP_Referer|ARGS "historyintospace\.com" SecRule HTTP_Referer|ARGS "hit-logo-klingelton\.com" SecRule HTTP_Referer|ARGS "hit-logo-ringetone\.com" SecRule HTTP_Referer|ARGS "hit-logo-ringtone\.com" SecRule HTTP_Referer|ARGS "hit-logo-suoneria\.com" SecRule HTTP_Referer|ARGS "hit-melodias\.com" SecRule HTTP_Referer|ARGS "hits-logos-games\.com" SecRule HTTP_Referer|ARGS "hitslogosgames\.com" SecRule HTTP_Referer|ARGS "hits-logos-klingeltone\.com" SecRule HTTP_Referer|ARGS "hit-sonnerie\.net" SecRule HTTP_Referer|ARGS "hit-sonneries\.com" SecRule HTTP_Referer|ARGS "hlopci\.w5\.pl" SecRule HTTP_Referer|ARGS "hobbs-farm\.com" SecRule HTTP_Referer|ARGS "hold-em-big\.com" SecRule HTTP_Referer|ARGS "holdem-texaspoker\.com" SecRule HTTP_Referer|ARGS "holding\.errorworld\.org" SecRule HTTP_Referer|ARGS "hold-pok\.com" SecRule HTTP_Referer|ARGS "homesbysellers\.(net|org|com|info|biz)" SecRule HTTP_Referer|ARGS "home-design\.ws" SecRule HTTP_Referer|ARGS "home-equity-loans-mortgage-refinancing\.com" SecRule HTTP_Referer|ARGS "homelivecams\.com" SecRule HTTP_Referer|ARGS "home-loans-inc\.com" SecRule HTTP_Referer|ARGS "homenetworkingsolutions\.co\.uk" SecRule HTTP_Referer|ARGS "home\.pages\.at" SecRule HTTP_Referer|ARGS "home\.ro\b" SecRule HTTP_Referer|ARGS "home-style\.ws" SecRule HTTP_Referer|ARGS "hometeaminspection\.net" SecRule HTTP_Referer|ARGS "hometeaminspection\.org" SecRule HTTP_Referer|ARGS "home-videos\.net" SecRule HTTP_Referer|ARGS "hoodia\.belleity\.com" SecRule HTTP_Referer|ARGS "hoodia--gardonii\.com" SecRule HTTP_Referer|ARGS "horizonultra\.com" SecRule HTTP_Referer|ARGS "horny-honey\.com" SecRule HTTP_Referer|ARGS "hornymoms\.net" SecRule HTTP_Referer|ARGS "hornypages\.com" SecRule HTTP_Referer|ARGS "horny-world\.com" SecRule HTTP_Referer|ARGS "horoskop-auswertung\.de" SecRule HTTP_Referer|ARGS "horse-racebetting\.com" SecRule HTTP_Referer|ARGS "horse-racing--betting\.net" SecRule HTTP_Referer|ARGS "horse-sex\.ws" SecRule HTTP_Referer|ARGS "hostingplus\.com" SecRule HTTP_Referer|ARGS "hostultra\.com" SecRule HTTP_Referer|ARGS "hot-cialis\.com" SecRule HTTP_Referer|ARGS "hotelbookingserver\.com" SecRule HTTP_Referer|ARGS "hotel-bordeaux\.cjb\.net" SecRule HTTP_Referer|ARGS "hotelhieress\.com" SecRule HTTP_Referer|ARGS "hotelsaficionado\.com" SecRule HTTP_Referer|ARGS "hotelsplustours\.com" SecRule HTTP_Referer|ARGS "hot-escort-services\.com" SecRule HTTP_Referer|ARGS "hotfunsingles\.com" SecRule HTTP_Referer|ARGS "hotlivegirls.co.uk" SecRule HTTP_Referer|ARGS "hotmatchup.co.uk" SecRule HTTP_Referer|ARGS "hot-mates\.info" SecRule HTTP_Referer|ARGS "hot-naked-guys\.net" SecRule HTTP_Referer|ARGS "hotsexys\.com" SecRule HTTP_Referer|ARGS "hotsing\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "hotusa\.org" SecRule HTTP_Referer|ARGS "houseofsevengables\.com" SecRule HTTP_Referer|ARGS "how-quit-smoking\.com" SecRule HTTP_Referer|ARGS "how-to-play-poker-quick\.com" SecRule HTTP_Referer|ARGS "how-to-stretch-your-penis" SecRule HTTP_Referer|ARGS "hq-pictures\.org" SecRule HTTP_Referer|ARGS "hs168\.com" SecRule HTTP_Referer|ARGS "hswin\.com" SecRule HTTP_Referer|ARGS "htmldiff\.com" SecRule HTTP_Referer|ARGS "huazhangmba\.com" SecRule HTTP_Referer|ARGS "humangrowthhormone\.org" SecRule HTTP_Referer|ARGS "hunksandbabes\.com" SecRule HTTP_Referer|ARGS "hurricane-ivan.blogspot\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "husler.co.uk" SecRule HTTP_Referer|ARGS "hustlerbarelylegalteen\.com" SecRule HTTP_Referer|ARGS "hustler\.bz" SecRule HTTP_Referer|ARGS "hustlerw\.com" SecRule HTTP_Referer|ARGS "hxlll\.net" SecRule HTTP_Referer|ARGS "hyper-sex\.com" SecRule HTTP_Referer|ARGS "hypnobabies\.co\.uk" SecRule HTTP_Referer|ARGS "i-black-jack\.com" SecRule HTTP_Referer|ARGS "i-butalbital-fioricet\.com" SecRule HTTP_Referer|ARGS "i-buy-mortgage\.com" SecRule HTTP_Referer|ARGS "i--cialis\.net" SecRule HTTP_Referer|ARGS "idebtconsolidation\.org" SecRule HTTP_Referer|ARGS "identity-theft\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "i-directv\.net" SecRule HTTP_Referer|ARGS "i-dish-network\.org" SecRule HTTP_Referer|ARGS "idp4u\.com" SecRule HTTP_Referer|ARGS "i-flexeril\.com" SecRule HTTP_Referer|ARGS "ifreepages\.com" SecRule HTTP_Referer|ARGS "i-free-poker\.com" SecRule HTTP_Referer|ARGS "i-horny\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "i-horny\.com" SecRule HTTP_Referer|ARGS "i-ink-cartridges\.com" SecRule HTTP_Referer|ARGS "ikbendom.nl" SecRule HTTP_Referer|ARGS "ikbenkoel.nl" SecRule HTTP_Referer|ARGS "illegalhome\.com" SecRule HTTP_Referer|ARGS "illegalspace\.com" SecRule HTTP_Referer|ARGS "iloveclicks\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "ilya\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "imagenes-tops\.com\.mx" SecRule HTTP_Referer|ARGS "imess\.net" SecRule HTTP_Referer|ARGS "imitrex-web\.com" SecRule HTTP_Referer|ARGS "immagini-hentai\.org" SecRule HTTP_Referer|ARGS "immigrationattorney.ca" SecRule HTTP_Referer|ARGS "immobilienangebote-auswahl\.de" SecRule HTTP_Referer|ARGS "immobilien-auswaehlen\.de" SecRule HTTP_Referer|ARGS "immobilienmakler-angebote\.de" SecRule HTTP_Referer|ARGS "immobilienmakler-l\.de" SecRule HTTP_Referer|ARGS "immobilienmarkt-grundstuecke\.de" SecRule HTTP_Referer|ARGS "immobilierdessavoie\.com" SecRule HTTP_Referer|ARGS "im-naked\.com" SecRule HTTP_Referer|ARGS "imobissimo\.com" SecRule HTTP_Referer|ARGS "i-mortgage-online\.com" SecRule HTTP_Referer|ARGS "impotence-rx\.biz" SecRule HTTP_Referer|ARGS "incest-movies-download\.com" SecRule HTTP_Referer|ARGS "incest-photo\.com" SecRule HTTP_Referer|ARGS "incest-photos-archive\.com" SecRule HTTP_Referer|ARGS "incest-pics-gallery\.com" SecRule HTTP_Referer|ARGS "incest-pics--incest\.com" SecRule HTTP_Referer|ARGS "incest-reality\.com" SecRule HTTP_Referer|ARGS "incest-relations\.com" SecRule HTTP_Referer|ARGS "incest-stories\.biz" SecRule HTTP_Referer|ARGS "incest-stories-library\.com" SecRule HTTP_Referer|ARGS "inceststories\.ws" SecRule HTTP_Referer|ARGS "incest-taboo\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "incest-taboo\.net" SecRule HTTP_Referer|ARGS "incest-videos-collection\.com" SecRule HTTP_Referer|ARGS "inclinetahoehomes\.com" SecRule HTTP_Referer|ARGS "inc-magazine\.com" SecRule HTTP_Referer|ARGS "incredishop\.com" SecRule HTTP_Referer|ARGS "incsx\.com" SecRule HTTP_Referer|ARGS "indian-sex-porno-movies-stories\.com" SecRule HTTP_Referer|ARGS "indiasilk\.biz" SecRule HTTP_Referer|ARGS "indiasilktradition\.com" SecRule HTTP_Referer|ARGS "industrialresource\.biz" SecRule HTTP_Referer|ARGS "industrial-testing-equipment\.com" SecRule HTTP_Referer|ARGS "inescudna\.com" SecRule HTTP_Referer|ARGS "inexpensiverx\.net" SecRule HTTP_Referer|ARGS "infocenter-crm\.com" SecRule HTTP_Referer|ARGS "inforceable\.com" SecRule HTTP_Referer|ARGS "inforceables\.com" SecRule HTTP_Referer|ARGS "ingyensms\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "ingyensms\.net" SecRule HTTP_Referer|ARGS "ingyensms\.org" SecRule HTTP_Referer|ARGS "inkjet-toner-cartridge.info" SecRule HTTP_Referer|ARGS "innfg\.de" SecRule HTTP_Referer|ARGS "insatiablepussy\.com" SecRule HTTP_Referer|ARGS "inside\.afraid\.org" SecRule HTTP_Referer|ARGS "insidethevip.co.uk" SecRule HTTP_Referer|ARGS "instant-quick-money-cash-advance-personal-loans-until-pay-day\.com" SecRule HTTP_Referer|ARGS "instantsatellite\.com" SecRule HTTP_Referer|ARGS "instant-webshop\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "insurancecompanies4you\.com" SecRule HTTP_Referer|ARGS "insurancehere\.net" SecRule HTTP_Referer|ARGS "insuranceinfo.biz" SecRule HTTP_Referer|ARGS "insurance-quotes-fast\.com" SecRule HTTP_Referer|ARGS "insurancequoteweb\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "interest-?only-?mortgage" SecRule HTTP_Referer|ARGS "interiorproshop\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "international-candle-shop\.com" SecRule HTTP_Referer|ARGS "international-cheese-shop\.com" SecRule HTTP_Referer|ARGS "internet-job-nebenjob.de" SecRule HTTP_Referer|ARGS "internet-meds\.biz" SecRule HTTP_Referer|ARGS "internet-merchant-account-pro\.com" SecRule HTTP_Referer|ARGS "internet-poker-online-4-u\.com" SecRule HTTP_Referer|ARGS "internette-anbieter\.de" SecRule HTTP_Referer|ARGS "interracial-sex\.ws" SecRule HTTP_Referer|ARGS "inter-ross\.ru" SecRule HTTP_Referer|ARGS "int-fed-aromatherapy\.co\.uk" SecRule HTTP_Referer|ARGS "inthevip-4u\.com" SecRule HTTP_Referer|ARGS "in-the-vip\.org" SecRule HTTP_Referer|ARGS "inthevip-sex\.com" SecRule HTTP_Referer|ARGS "intimplace\.com" SecRule HTTP_Referer|ARGS "intymnie\.com" SecRule HTTP_Referer|ARGS "inviare-mms\.net" SecRule HTTP_Referer|ARGS "invio-mms\.us" SecRule HTTP_Referer|ARGS "ionic-bonds\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "i-online-bingo\.com" SecRule HTTP_Referer|ARGS "i-online-poker\.com" SecRule HTTP_Referer|ARGS "ipaddressworld\.com" SecRule HTTP_Referer|ARGS "ipharmacy\.com" SecRule HTTP_Referer|ARGS "i-play-bingo\.com" SecRule HTTP_Referer|ARGS "i-play-blackjack\.com" SecRule HTTP_Referer|ARGS "i-play-casino\.com" SecRule HTTP_Referer|ARGS "i-play-poker\.com" SecRule HTTP_Referer|ARGS "i-play-poker-online\.biz" SecRule HTTP_Referer|ARGS "i-play-poker-online\.com" SecRule HTTP_Referer|ARGS "i-play-poker-online\.us" SecRule HTTP_Referer|ARGS "ipmotor\.com" SecRule HTTP_Referer|ARGS "ipsnihongo\.org" SecRule HTTP_Referer|ARGS "ipupdater\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "ipupdater\.com" SecRule HTTP_Referer|ARGS "irianjaya\.co\.uk" SecRule HTTP_Referer|ARGS "irs-us\.net" SecRule HTTP_Referer|ARGS "i-ru\.net" SecRule HTTP_Referer|ARGS "isacommie\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "isacommie\.com" SecRule HTTP_Referer|ARGS "iservice\.eu\.com" SecRule HTTP_Referer|ARGS "i-skelaxin\.com" SecRule HTTP_Referer|ARGS "i-soma\.net" SecRule HTTP_Referer|ARGS "isparkl\.com" SecRule HTTP_Referer|ARGS "israelsex.nl" SecRule HTTP_Referer|ARGS "istarthere\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "italiancharmsbracelets.info" SecRule HTTP_Referer|ARGS "itgo\.com" SecRule HTTP_Referer|ARGS "\.itsaol\.(com|net|org|info|biz)" SecRule HTTP_Referer|ARGS "iul-online\.de" SecRule HTTP_Referer|ARGS "i-university-guide\.com" SecRule HTTP_Referer|ARGS "iwas2\.(com|net)" SecRule HTTP_Referer|ARGS "iwebbroker\.com" SecRule HTTP_Referer|ARGS "i-wellbutrin\.com" SecRule HTTP_Referer|ARGS "i-will-find-the-best-mortgage-lead\.com" SecRule HTTP_Referer|ARGS "i-win-bingo\.com" SecRule HTTP_Referer|ARGS "ixay\.com" SecRule HTTP_Referer|ARGS "jacks-world\.com" SecRule HTTP_Referer|ARGS "jack-x\.com" SecRule HTTP_Referer|ARGS "jade\.bilder-i\.de" SecRule HTTP_Referer|ARGS "jagk\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "japan-partner\.com" SecRule HTTP_Referer|ARGS "jardimed\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "jegem\.com" SecRule HTTP_Referer|ARGS "jenniferconnor\.com" SecRule HTTP_Referer|ARGS "jenthony\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "jewelry4navel\.com" SecRule HTTP_Referer|ARGS "jfcadvocacy\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "jfcadvocacy\.net" SecRule HTTP_Referer|ARGS "jf-w\.com" SecRule HTTP_Referer|ARGS "jinlong\.co\.uk" SecRule HTTP_Referer|ARGS "jmsimonr\.com" SecRule HTTP_Referer|ARGS "job-interview-questions-tips\.com" SecRule HTTP_Referer|ARGS "jobsearchlegal\.com" SecRule HTTP_Referer|ARGS "johnhowesatty\.com" SecRule HTTP_Referer|ARGS "johnhuron\.com" SecRule HTTP_Referer|ARGS "jokeria\.de" SecRule HTTP_Referer|ARGS "jordanand\.topcities\.com" SecRule HTTP_Referer|ARGS "josephlied\.com" SecRule HTTP_Referer|ARGS "judahskateboards\.com" SecRule HTTP_Referer|ARGS "juega-al-casino\.com" SecRule HTTP_Referer|ARGS "juice-clit-licking\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "juliamiles\.co\.uk" SecRule HTTP_Referer|ARGS "jungfrauen-sex\.com" SecRule HTTP_Referer|ARGS "junyuan\.com\.cn" SecRule HTTP_Referer|ARGS "jupiterstar\.com" SecRule HTTP_Referer|ARGS "justasex\.com" SecRule HTTP_Referer|ARGS "just-deals.info" SecRule HTTP_Referer|ARGS "justsexstories\.com" SecRule HTTP_Referer|ARGS "jytouch\.com" SecRule HTTP_Referer|ARGS "kampelicka\.com" SecRule HTTP_Referer|ARGS "kantorg\.h10\.ru" SecRule HTTP_Referer|ARGS "kapitaalmarktrente\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "kapsociety\.org" SecRule HTTP_Referer|ARGS "kardtoons\.co\.uk" SecRule HTTP_Referer|ARGS "karibubaskets\.com" SecRule HTTP_Referer|ARGS "karmicdebtconsolidation\.com" SecRule HTTP_Referer|ARGS "kat.za\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "kcufrecnac\.com" SecRule HTTP_Referer|ARGS "keikoasura\.com" SecRule HTTP_Referer|ARGS "keithandrew\.co\.uk" SecRule HTTP_Referer|ARGS "kerosinjunkie\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "kewler\.net" SecRule HTTP_Referer|ARGS "kewl-links\.com" SecRule HTTP_Referer|ARGS "keywordmaster.de" SecRule HTTP_Referer|ARGS "killasvideo\.com" SecRule HTTP_Referer|ARGS "kinggimp\.org" SecRule HTTP_Referer|ARGS "kinkyhosting\.com" SecRule HTTP_Referer|ARGS "kinkykinky.nl" SecRule HTTP_Referer|ARGS "kinky-teen-videos\.com" SecRule HTTP_Referer|ARGS "kiranthakrar\.co\.uk" SecRule HTTP_Referer|ARGS "kleinkinder-shop\.de" SecRule HTTP_Referer|ARGS "klik-search\.com" SecRule HTTP_Referer|ARGS "e-poker-2005\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "\.sigmapiscu\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "\.pisangrebus\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "poker-hands" SecRule HTTP_Referer|ARGS "klingeltoene-handylogos\.de\.be" SecRule HTTP_Referer|ARGS "klingeltone-logo\.com" SecRule HTTP_Referer|ARGS "klitoris\.ca" SecRule HTTP_Referer|ARGS "kloony\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "kmsenergy\.com" SecRule HTTP_Referer|ARGS "kohost\.us" SecRule HTTP_Referer|ARGS "koihoo\.com" SecRule HTTP_Referer|ARGS "kontaktanzeigen-bild\.de\.ms" SecRule HTTP_Referer|ARGS "kontaktlinsen-partner\.de" SecRule HTTP_Referer|ARGS "kontaktpartnersuche\.com" SecRule HTTP_Referer|ARGS "kontlikken\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "kostenlose-sexkontakte\.org" SecRule HTTP_Referer|ARGS "krantas\.org" SecRule HTTP_Referer|ARGS "kraskidliavas\.ru" SecRule HTTP_Referer|ARGS "kredite-kredit\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "kredite-online\.de\.ms" SecRule HTTP_Referer|ARGS "kredite-portal\.de" SecRule HTTP_Referer|ARGS "kredite-sofortzusage\.de" SecRule HTTP_Referer|ARGS "kreditkarten-sofort\.de\.ms" SecRule HTTP_Referer|ARGS "kredit-ratenkredit-sofortkredit\.de" SecRule HTTP_Referer|ARGS "kupibuket\.ru" SecRule HTTP_Referer|ARGS "kwik\.static\.net" SecRule HTTP_Referer|ARGS "kyfarmhouse\.org" SecRule HTTP_Referer|ARGS "kylos\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "kylosnet\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "lablog\.biz" #SecRule HTTP_Referer|ARGS "labo.ac" SecRule HTTP_Referer|ARGS "lacetongue\.com" SecRule HTTP_Referer|ARGS "lach-ab\.de" SecRule HTTP_Referer|ARGS "lakesideartonline\.com" SecRule HTTP_Referer|ARGS "lambethcouncil\.com" SecRule HTTP_Referer|ARGS "lambuschlamppen\.com" SecRule HTTP_Referer|ARGS "landscape-painting\.as\.ro" SecRule HTTP_Referer|ARGS "langsrestaurant\.com" SecRule HTTP_Referer|ARGS "lanreport\.com" SecRule HTTP_Referer|ARGS "laptopy\.biz\.pl" SecRule HTTP_Referer|ARGS "lastminute-blitz\.de" SecRule HTTP_Referer|ARGS "las-vegas-real-estate-1\.com" SecRule HTTP_Referer|ARGS "lasvegas-real-estate\.net" SecRule HTTP_Referer|ARGS "lasvegasrealtor\.com" SecRule HTTP_Referer|ARGS "lasvegastourfinder\.com" SecRule HTTP_Referer|ARGS "latina-hot-girls\.com" SecRule HTTP_Referer|ARGS "latina-sex\.ws" SecRule HTTP_Referer|ARGS "lavalifedating\.com" SecRule HTTP_Referer|ARGS "leadbanx\.com" SecRule HTTP_Referer|ARGS "learnhowtoplay\.com" SecRule HTTP_Referer|ARGS "learningphpfast\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "learnthebiz\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "lebonpost\.com" SecRule HTTP_Referer|ARGS "lechery-family\.com" SecRule HTTP_Referer|ARGS "ledo-design\.com" SecRule HTTP_Referer|ARGS "legalblonde\.com" SecRule HTTP_Referer|ARGS "legfreak\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "lemonrider" SecRule HTTP_Referer|ARGS "lepommeau\.com" SecRule HTTP_Referer|ARGS "lesbian-girl\.us" SecRule HTTP_Referer|ARGS "lesbian-sex-porn-pics-stories\.com" SecRule HTTP_Referer|ARGS "lesbichex\.com" SecRule HTTP_Referer|ARGS "lesbo-rama\.com" SecRule HTTP_Referer|ARGS "leseratten-wunderland\.de" SecRule HTTP_Referer|ARGS "letemgo\.de" SecRule HTTP_Referer|ARGS "leveltendesign\.com" SecRule HTTP_Referer|ARGS "lexapro-web\.com" SecRule HTTP_Referer|ARGS "lexfinance\.com" SecRule HTTP_Referer|ARGS "lgt-clan\.ru" SecRule HTTP_Referer|ARGS "libr-animal\.com" SecRule HTTP_Referer|ARGS "libraries.org.ru" SecRule HTTP_Referer|ARGS "life-insurance-advisor\.com" SecRule HTTP_Referer|ARGS "lifeinsurancefinders\.com" SecRule HTTP_Referer|ARGS "\.liftyourself\.(com|net|org|info|biz)" SecRule HTTP_Referer|ARGS "likemynudebody.co.uk" SecRule HTTP_Referer|ARGS "likesmature\.com" SecRule HTTP_Referer|ARGS "likewaterlikewind\.com" SecRule HTTP_Referer|ARGS "lingeriegirls.nl" SecRule HTTP_Referer|ARGS "lingerie-land\.com" SecRule HTTP_Referer|ARGS "link-dir\.com" SecRule HTTP_Referer|ARGS "linkerdome\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "linkliste-geschenke\.de" SecRule HTTP_Referer|ARGS "linseysworld\.com" SecRule HTTP_Referer|ARGS "linuxwaves\.net" SecRule HTTP_Referer|ARGS "lipitordiscount\.biz" SecRule HTTP_Referer|ARGS "lipitordiscount\.com" SecRule HTTP_Referer|ARGS "lisaber\.com" SecRule HTTP_Referer|ARGS "list1st\.com" SecRule HTTP_Referer|ARGS "listbanx\.com" SecRule HTTP_Referer|ARGS "live-casino\.com" SecRule HTTP_Referer|ARGS "livenet\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "livetexasholdem\.com" SecRule HTTP_Referer|ARGS "livetreff\.tv" SecRule HTTP_Referer|ARGS "livevents\.de" SecRule HTTP_Referer|ARGS "lizardofoz\.com" SecRule HTTP_Referer|ARGS "\.dyndsl\.com" SecRule HTTP_Referer|ARGS "lizziemills\.com" SecRule HTTP_Referer|ARGS "loaninfotoday\.com" SecRule HTTP_Referer|ARGS "loan-king\.com" SecRule HTTP_Referer|ARGS "loans-4all\.com" SecRule HTTP_Referer|ARGS "loans\.de\.vu" SecRule HTTP_Referer|ARGS "loans-no-fax\.com" SecRule HTTP_Referer|ARGS "loan-superstore\.com" SecRule HTTP_Referer|ARGS "locationcorse\.free\.fr" SecRule HTTP_Referer|ARGS "lockportlinks\.com" SecRule HTTP_Referer|ARGS "logo-beltonen\.com" SecRule HTTP_Referer|ARGS "logod-helinad-mangud\.com" SecRule HTTP_Referer|ARGS "logoer-mobil\.com" SecRule HTTP_Referer|ARGS "logo-free\.com" SecRule HTTP_Referer|ARGS "logo-klingeltone\.com" SecRule HTTP_Referer|ARGS "logo-max\.com" SecRule HTTP_Referer|ARGS "logo-melodias\.com" SecRule HTTP_Referer|ARGS "logo-mobiel\.com" SecRule HTTP_Referer|ARGS "logo-mobile-repondeur\.com" SecRule HTTP_Referer|ARGS "logo-moviles\.com" SecRule HTTP_Referer|ARGS "logo-phones\.com" SecRule HTTP_Referer|ARGS "logo-repondeur-mobile\.com" SecRule HTTP_Referer|ARGS "logos-downloads\.com" SecRule HTTP_Referer|ARGS "logos-free\.com" SecRule HTTP_Referer|ARGS "logosik\.pl" SecRule HTTP_Referer|ARGS "logos-logos\.be" SecRule HTTP_Referer|ARGS "logos-melodijas-speles\.com" SecRule HTTP_Referer|ARGS "logos-mobile-repondeurs\.com" SecRule HTTP_Referer|ARGS "logo-sonneries-sonnerie\.com" SecRule HTTP_Referer|ARGS "logos-phones\.com" SecRule HTTP_Referer|ARGS "logo-spiele\.com" SecRule HTTP_Referer|ARGS "logos-repondeurs-mobile\.com" SecRule HTTP_Referer|ARGS "logos-sonneries-jeux\.com" SecRule HTTP_Referer|ARGS "logos-sonneries-jeuxmobiles\.com" SecRule HTTP_Referer|ARGS "logos-sonneries-sonnerie\.com" SecRule HTTP_Referer|ARGS "logos-tone\.com" SecRule HTTP_Referer|ARGS "logo-tones\.com" SecRule HTTP_Referer|ARGS "logotyper-mobil\.com" SecRule HTTP_Referer|ARGS "lolika\.net" SecRule HTTP_Referer|ARGS "longslabofjoy\.com" SecRule HTTP_Referer|ARGS "lookforukhotels\.com" SecRule HTTP_Referer|ARGS "looking4you.nl" SecRule HTTP_Referer|ARGS "lookingforyou.nl" SecRule HTTP_Referer|ARGS "loraxe\.com" SecRule HTTP_Referer|ARGS "lowclass\.de" SecRule HTTP_Referer|ARGS "lowcost\.us\.com" SecRule HTTP_Referer|ARGS "lowest-rates-mortgages\.com" SecRule HTTP_Referer|ARGS "lowinterestratecreditcards\.net" SecRule HTTP_Referer|ARGS "low-low-rates\.com" SecRule HTTP_Referer|ARGS "lucalozzi\.com" SecRule HTTP_Referer|ARGS "luffassociates\.co\.uk" SecRule HTTP_Referer|ARGS "lutschraus\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "luxus-gourmetartikel\.de" SecRule HTTP_Referer|ARGS "lvcpa\.net" SecRule HTTP_Referer|ARGS "lvcpa\.org" SecRule HTTP_Referer|ARGS "lvrealty\.net" SecRule HTTP_Referer|ARGS "lynskey-admiration\.org\.uk" SecRule HTTP_Referer|ARGS "bt-gambling\.ws" SecRule HTTP_Referer|ARGS "lyriclovers\.com" SecRule HTTP_Referer|ARGS "macinstruct\.net" SecRule HTTP_Referer|ARGS "\.maclenet\.com" SecRule HTTP_Referer|ARGS "mail333\.com" SecRule HTTP_Referer|ARGS "mainentrypoint\.com" SecRule HTTP_Referer|ARGS "mainjob\.ru" SecRule HTTP_Referer|ARGS "majorapplewhite\.info" SecRule HTTP_Referer|ARGS "make-money\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "makemoney\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "maki-e-pens\.com" SecRule HTTP_Referer|ARGS "male-enhancement" SecRule HTTP_Referer|ARGS "\.male-enlargement\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "male-enlargement\.com" SecRule HTTP_Referer|ARGS "malenatural\.com" SecRule HTTP_Referer|ARGS "malesizegenetics\.com" SecRule HTTP_Referer|ARGS "mallorycoatings\.co\.uk" SecRule HTTP_Referer|ARGS "maloylawn\.com" SecRule HTTP_Referer|ARGS "mandysdiary\.biz" SecRule HTTP_Referer|ARGS "mandysdiary\.ws" SecRule HTTP_Referer|ARGS "manga-free\.net" SecRule HTTP_Referer|ARGS "manga-free\.org" SecRule HTTP_Referer|ARGS "manga-porn\.us" SecRule HTTP_Referer|ARGS "manga-x\.biz" SecRule HTTP_Referer|ARGS "manga-xxx\.org" SecRule HTTP_Referer|ARGS "mannensex.nl" SecRule HTTP_Referer|ARGS "manufacturers-blog\.com" SecRule HTTP_Referer|ARGS "maps.org.ru" SecRule HTTP_Referer|ARGS "march--madness\.biz" SecRule HTTP_Referer|ARGS "march--madness\.info" SecRule HTTP_Referer|ARGS "march--madness\.org" SecRule HTTP_Referer|ARGS "marcomdeal\.com" SecRule HTTP_Referer|ARGS "marshallsupersoft\.com" SecRule HTTP_Referer|ARGS "marshallyachts\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "marshallyachts\.org" SecRule HTTP_Referer|ARGS "marteq-on\.com" SecRule HTTP_Referer|ARGS "masonry-services\.com" SecRule HTTP_Referer|ARGS "mastheadwankers\.com" SecRule HTTP_Referer|ARGS "match-me-up\.com" SecRule HTTP_Referer|ARGS "matureacts\.com" SecRule HTTP_Referer|ARGS "mature-big-tits\.net" SecRule HTTP_Referer|ARGS "maturefolk\.com" SecRule HTTP_Referer|ARGS "mature-hardy.info" SecRule HTTP_Referer|ARGS "mature-old-mature\.com" SecRule HTTP_Referer|ARGS "\.mature-passion\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "mature-reality\.com" SecRule HTTP_Referer|ARGS "mature-sex-moms-porn\.com" SecRule HTTP_Referer|ARGS "maturetours\.com" SecRule HTTP_Referer|ARGS "maxigenweb\.com" SecRule HTTP_Referer|ARGS "maximumcash\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "mbgeezers\.com" SecRule HTTP_Referer|ARGS "mcdortaklar\.com" SecRule HTTP_Referer|ARGS "mcfimortgage\.com" SecRule HTTP_Referer|ARGS "mediaaustralia\.com\.au" SecRule HTTP_Referer|ARGS "mediacentral\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "mediavisor\.com" SecRule HTTP_Referer|ARGS "medical4order\.com" SecRule HTTP_Referer|ARGS "medications-4all\.com" SecRule HTTP_Referer|ARGS "medicinecheaper\.com" SecRule HTTP_Referer|ARGS "medicine-supply\.com" SecRule HTTP_Referer|ARGS "medicinetrail\.org" SecRule HTTP_Referer|ARGS "meds-pill\.com" SecRule HTTP_Referer|ARGS "medweightloss" SecRule HTTP_Referer|ARGS "medyep\.com" SecRule HTTP_Referer|ARGS "\.mefound\.(com|net|org)" SecRule HTTP_Referer|ARGS "megafrontier\.com" SecRule HTTP_Referer|ARGS "megapornstation\.com" SecRule HTTP_Referer|ARGS "mega-spass\.com" SecRule HTTP_Referer|ARGS "melincs\.org" SecRule HTTP_Referer|ARGS "melodias-logos-juegos\.com" SecRule HTTP_Referer|ARGS "members\.fortunecity\.com/kennetharmstrong" SecRule HTTP_Referer|ARGS "menexis\.com" SecRule HTTP_Referer|ARGS "mengfuxiang\.com" SecRule HTTP_Referer|ARGS "menguma\.com" SecRule HTTP_Referer|ARGS "menguma\.co\.uk" SecRule HTTP_Referer|ARGS "men-porn\.us" SecRule HTTP_Referer|ARGS "menservers\.com" SecRule HTTP_Referer|ARGS "men-sex\.us" SecRule HTTP_Referer|ARGS "mens-health-pills\.com" SecRule HTTP_Referer|ARGS "menzyme\.com" SecRule HTTP_Referer|ARGS "merchantaccount\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "merditer\.com" SecRule HTTP_Referer|ARGS "merseine\.nu" SecRule HTTP_Referer|ARGS "mesothelioma-asbestos-help\.com" SecRule HTTP_Referer|ARGS "mesothelioma-health\.com" SecRule HTTP_Referer|ARGS "mesothelioma\.net" SecRule HTTP_Referer|ARGS "metroshopperguide\.com" SecRule HTTP_Referer|ARGS "mettle\.com\.cn" SecRule HTTP_Referer|ARGS "miccel\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "micelebre\.com" SecRule HTTP_Referer|ARGS "michigan-attorney\.lbgo\.com" SecRule HTTP_Referer|ARGS "micrasci\.com" SecRule HTTP_Referer|ARGS "microsoft-com\.us" SecRule HTTP_Referer|ARGS "middlecay\.net" SecRule HTTP_Referer|ARGS "middlecay\.org" SecRule HTTP_Referer|ARGS "midget-porn-sex\.com" SecRule HTTP_Referer|ARGS "mietangebote-domain\.de" SecRule HTTP_Referer|ARGS "migraine-relief\.com" SecRule HTTP_Referer|ARGS "mikebunton\.com" SecRule HTTP_Referer|ARGS "milehighdiva\.blogdrive\.com" SecRule HTTP_Referer|ARGS "milesscaffolding\.co\.uk" SecRule HTTP_Referer|ARGS "milf-hardcore\.net" SecRule HTTP_Referer|ARGS "milflessons\.(com|net|org)" SecRule HTTP_Referer|ARGS "milfporn\.org" SecRule HTTP_Referer|ARGS "milf-rider\.us" SecRule HTTP_Referer|ARGS "milf-xxx-action\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "mingholee\.com" SecRule HTTP_Referer|ARGS "miracle-diet\.com" SecRule HTTP_Referer|ARGS "misterwolf\.net" SecRule HTTP_Referer|ARGS "mixtaperadio\.com" SecRule HTTP_Referer|ARGS "mmorpg-headlines\.com" SecRule HTTP_Referer|ARGS "mmsanimati\.com" SecRule HTTP_Referer|ARGS "mneuron\.com" SecRule HTTP_Referer|ARGS "mobilefamilydental\.com" SecRule HTTP_Referer|ARGS "-mobile-phones\.org" SecRule HTTP_Referer|ARGS "mobilequicksale\.com" SecRule HTTP_Referer|ARGS "mobile-repondeur-logo\.com" SecRule HTTP_Referer|ARGS "mobile-repondeurs-logos\.com" SecRule HTTP_Referer|ARGS "mobilesandringtones\.com" SecRule HTTP_Referer|ARGS "mode-domain\.de" SecRule HTTP_Referer|ARGS "mode-einkaufsbummel\.de" SecRule HTTP_Referer|ARGS "moltobene\.ru" SecRule HTTP_Referer|ARGS "mominaction.info" SecRule HTTP_Referer|ARGS "monavaletoys\.com" SecRule HTTP_Referer|ARGS "mondialcoral\.com" SecRule HTTP_Referer|ARGS "moneybg\.com" SecRule HTTP_Referer|ARGS "money-cash-loans\.com" SecRule HTTP_Referer|ARGS "moneylinebet\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "money-room\.com" SecRule HTTP_Referer|ARGS "montaguefineart\.com" SecRule HTTP_Referer|ARGS "mookyong\.com" SecRule HTTP_Referer|ARGS "moris-dada\.com" SecRule HTTP_Referer|ARGS "mor-lite\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "mor-lite\.net" SecRule HTTP_Referer|ARGS "mor-lite\.org" SecRule HTTP_Referer|ARGS "mortage-4all\.com" SecRule HTTP_Referer|ARGS "mortgage-info-center\.com" SecRule HTTP_Referer|ARGS "mortgagemarketinginc\.com" SecRule HTTP_Referer|ARGS "mortgagequestaz\.com" SecRule HTTP_Referer|ARGS "mortgage-(rate|loan)-calculator" SecRule HTTP_Referer|ARGS "mortgagerates4all\.com" SecRule HTTP_Referer|ARGS "mortgage-rates-guide\.net" SecRule HTTP_Referer|ARGS "mortgagerefinancesite\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "mortgages-links\.net" SecRule HTTP_Referer|ARGS "mortloan\.com" SecRule HTTP_Referer|ARGS "mostika\.us" SecRule HTTP_Referer|ARGS "mother-son-incest-sex\.net" SecRule HTTP_Referer|ARGS "motonet\.pl" SecRule HTTP_Referer|ARGS "moviehits.nl" SecRule HTTP_Referer|ARGS "movies6\.com" SecRule HTTP_Referer|ARGS "mp3download\.bz" SecRule HTTP_Referer|ARGS "mp3int\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "mp3x\.biz" SecRule HTTP_Referer|ARGS "mpeg2pci\.com" SecRule HTTP_Referer|ARGS "mp-forum\.com" SecRule HTTP_Referer|ARGS "mrgoicoechea\.com" SecRule HTTP_Referer|ARGS "mrn\.vip\.sina\.com" SecRule HTTP_Referer|ARGS "mrpiercing\.com" SecRule HTTP_Referer|ARGS "multipurpose-plants\.net" SecRule HTTP_Referer|ARGS "multiservers\.com" SecRule HTTP_Referer|ARGS "musica-da-scaricare\.net" SecRule HTTP_Referer|ARGS "musica-gratis\.biz" SecRule HTTP_Referer|ARGS "musica-gratis\.org" SecRule HTTP_Referer|ARGS "musica-karaoke\.net" SecRule HTTP_Referer|ARGS "musica-mp3\.biz" SecRule HTTP_Referer|ARGS "musicamp3\.us" SecRule HTTP_Referer|ARGS "musicarchive.nl" SecRule HTTP_Referer|ARGS "musicbox1\.com" SecRule HTTP_Referer|ARGS "musicbox\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "musiccheap\.us" SecRule HTTP_Referer|ARGS "music-downloads-links\.com" SecRule HTTP_Referer|ARGS "musicenergy\.com" SecRule HTTP_Referer|ARGS "muxa\.ru" SecRule HTTP_Referer|ARGS "muziekhits.nl" SecRule HTTP_Referer|ARGS "mxbearings\.com" SecRule HTTP_Referer|ARGS "my-age\.net" SecRule HTTP_Referer|ARGS "myasiahotels\.com" SecRule HTTP_Referer|ARGS "mybestcasinos\.net" SecRule HTTP_Referer|ARGS "mybestclick\.com" SecRule HTTP_Referer|ARGS "mycasinohome\.com" SecRule HTTP_Referer|ARGS "mycheapcigstore\.com" SecRule HTTP_Referer|ARGS "mycialispharmacy\.com" SecRule HTTP_Referer|ARGS "my-dating-agency\.com" SecRule HTTP_Referer|ARGS "mydatingagency\.com" SecRule HTTP_Referer|ARGS "mydietdoctor\.com" SecRule HTTP_Referer|ARGS "my-discount-cigarettes\.com" SecRule HTTP_Referer|ARGS "myeuropehotels\.com" SecRule HTTP_Referer|ARGS "myfavlinks\.de" SecRule HTTP_Referer|ARGS "my-fetishes\.com" SecRule HTTP_Referer|ARGS "myfick.be" SecRule HTTP_Referer|ARGS "mygays.nl" SecRule HTTP_Referer|ARGS "mygenericrx\.com" SecRule HTTP_Referer|ARGS "mygidi\.com" SecRule HTTP_Referer|ARGS "myhomephonenumber\.com" SecRule HTTP_Referer|ARGS "myrice\.com" SecRule HTTP_Referer|ARGS "myrtlejones\.com" SecRule HTTP_Referer|ARGS "my-sex-toys-store\.com" SecRule HTTP_Referer|ARGS "myslimpatch\.com" SecRule HTTP_Referer|ARGS "mysofia\.net" SecRule HTTP_Referer|ARGS "mystify2001\.com" SecRule HTTP_Referer|ARGS "naakte-meisjes\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "naar\.be" SecRule HTTP_Referer|ARGS "nabm(il|li)or.com" SecRule HTTP_Referer|ARGS "nabpak\.org" SecRule HTTP_Referer|ARGS "nakedboysfirsttime\.com" SecRule HTTP_Referer|ARGS "naked-gay\.us" SecRule HTTP_Referer|ARGS "naked-pussy\.us" SecRule HTTP_Referer|ARGS "naked-womens-wrestling-league-dvds\.com" SecRule HTTP_Referer|ARGS "naked-womens-wrestling-league-videos\.com" SecRule HTTP_Referer|ARGS "nancyflowerswilson\.com" SecRule HTTP_Referer|ARGS "narod\.ru" SecRule HTTP_Referer|ARGS "nasty-pages\.com" SecRule HTTP_Referer|ARGS "natel-mobiles\.com" SecRule HTTP_Referer|ARGS "natterratter\.com" SecRule HTTP_Referer|ARGS "natural-barleygreen\.com" SecRule HTTP_Referer|ARGS "natural-breasts-enhancement\.net" SecRule HTTP_Referer|ARGS "naturalenhancement\.biz" SecRule HTTP_Referer|ARGS "natural-enlarg.*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "naturalenlarg.*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "naturalenlargement\.biz" SecRule HTTP_Referer|ARGS "natural-enlargement\.net" SecRule HTTP_Referer|ARGS "naturalknockers\.net" SecRule HTTP_Referer|ARGS "naturalpenis\.org" SecRule HTTP_Referer|ARGS "nehrucollege\.org" SecRule HTTP_Referer|ARGS "\.neighbour-wife-nude\.(com|net|org|info|biz)" SecRule HTTP_Referer|ARGS "neiladams\.org\.uk" SecRule HTTP_Referer|ARGS "nestbeschmutzer\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "netdating.nl" SecRule HTTP_Referer|ARGS "netdims\.com" SecRule HTTP_Referer|ARGS "netizen\.org" SecRule HTTP_Referer|ARGS "netleih\.de" SecRule HTTP_Referer|ARGS "netlogo\.us" SecRule HTTP_Referer|ARGS "net-mature\.com" SecRule HTTP_Referer|ARGS "netsx\.org" SecRule HTTP_Referer|ARGS "net-von-dir\.de" SecRule HTTP_Referer|ARGS "neurogenics\.co\.uk" SecRule HTTP_Referer|ARGS "new-cialis\.com" SecRule HTTP_Referer|ARGS "neweighweb\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "neweighweb\.net" SecRule HTTP_Referer|ARGS "neweighweb\.org" SecRule HTTP_Referer|ARGS "newfurnishing\.com" SecRule HTTP_Referer|ARGS "newgallery\.co\.uk" SecRule HTTP_Referer|ARGS "newmail\.ru" SecRule HTTP_Referer|ARGS "newprinceton\.com" SecRule HTTP_Referer|ARGS "newsnewsmedia\.com" SecRule HTTP_Referer|ARGS "newtruths\.com" SecRule HTTP_Referer|ARGS "newxwave\.com" SecRule HTTP_Referer|ARGS "nfl-football-tickets\.biz" SecRule HTTP_Referer|ARGS "nicecreampie\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "nicepages\.biz" SecRule HTTP_Referer|ARGS "nicepages\.net" SecRule HTTP_Referer|ARGS "nicepages\.org" SecRule HTTP_Referer|ARGS "nice-pussy\.us" SecRule HTTP_Referer|ARGS "niceshemales\.net" SecRule HTTP_Referer|ARGS "nichehit\.com" SecRule HTTP_Referer|ARGS "nicolepeters\.com" SecRule HTTP_Referer|ARGS "nieruchomosci\.biz\.pl" SecRule HTTP_Referer|ARGS "nifty-erotic-story-archive\.blogspot\.com" SecRule HTTP_Referer|ARGS "niibacca\.afraid\.org" SecRule HTTP_Referer|ARGS "nikkiwilliams\.info" SecRule HTTP_Referer|ARGS "njhma\.com" SecRule HTTP_Referer|ARGS "njunite\.net" SecRule HTTP_Referer|ARGS "no1pics\.com" SecRule HTTP_Referer|ARGS "no-cavities\.com" SecRule HTTP_Referer|ARGS "nohassle-loans\.com" SecRule HTTP_Referer|ARGS "no-ip\.org" SecRule HTTP_Referer|ARGS "nokia8310.revkom.ru" SecRule HTTP_Referer|ARGS "noniexpert\.com" SecRule HTTP_Referer|ARGS "noni-jungbrunnen\.com" SecRule HTTP_Referer|ARGS "noni-top-chance\.com" SecRule HTTP_Referer|ARGS "noni-vitalgetraenk\.com" SecRule HTTP_Referer|ARGS "nonstop-casino\.com" SecRule HTTP_Referer|ARGS "nonstopsex\.org" SecRule HTTP_Referer|ARGS "noslip-picks\.com" SecRule HTTP_Referer|ARGS "no-title\.de" SecRule HTTP_Referer|ARGS "notlong\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "notsure\.de" SecRule HTTP_Referer|ARGS "novacspacetravel\.com" SecRule HTTP_Referer|ARGS "now-hiringsluts\.com" SecRule HTTP_Referer|ARGS "nr-challenges\.org" SecRule HTTP_Referer|ARGS "nude-black\.us" SecRule HTTP_Referer|ARGS "nude.blogspot\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "nudecelebblogs\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "nude-celebrity-dvd\.com" SecRule HTTP_Referer|ARGS "nude-movies\.us" SecRule HTTP_Referer|ARGS "nude-teens\.name" SecRule HTTP_Referer|ARGS "nude-video\.us" SecRule HTTP_Referer|ARGS "nudevol\.us" SecRule HTTP_Referer|ARGS "nullnix\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "nutritionalsupplementstoday\.com" SecRule HTTP_Referer|ARGS "nutritional-supplements\.ws" SecRule HTTP_Referer|ARGS "nutzu\.com" SecRule HTTP_Referer|ARGS "nwwl-dvds\.com" SecRule HTTP_Referer|ARGS "nwwl-videos\.com" SecRule HTTP_Referer|ARGS "nxcailing\.com" SecRule HTTP_Referer|ARGS "nylonex\.com" SecRule HTTP_Referer|ARGS "nz\.com\.ua" SecRule HTTP_Referer|ARGS "officexl\.de" SecRule HTTP_Referer|ARGS "officezl\.com" SecRule HTTP_Referer|ARGS "officialdarajoy\.com/wwwboard" SecRule HTTP_Referer|ARGS "officialdentalplan\.com" SecRule HTTP_Referer|ARGS "officialsatellitetv\.com" SecRule HTTP_Referer|ARGS "offseasonelves\.com" SecRule HTTP_Referer|ARGS "ohamerica\.org" SecRule HTTP_Referer|ARGS "okuk\.org" SecRule HTTP_Referer|ARGS "olderr\.4t\.com" SecRule HTTP_Referer|ARGS "oldgrannyfucking\.com" SecRule HTTP_Referer|ARGS "old-sexy-sluts\.com" SecRule HTTP_Referer|ARGS "oliviagadamer\.com" SecRule HTTP_Referer|ARGS "oma6.biz" SecRule HTTP_Referer|ARGS "omega-fatty-acid\.com" SecRule HTTP_Referer|ARGS "o-mygod\.com" SecRule HTTP_Referer|ARGS "ondertiteling.info" SecRule HTTP_Referer|ARGS "one-blackjack\.com" SecRule HTTP_Referer|ARGS "one-cialis\.com" SecRule HTTP_Referer|ARGS "one-debt-consolidation\.com" SecRule HTTP_Referer|ARGS "oneoz\.com" SecRule HTTP_Referer|ARGS "onepiecex\.net" SecRule HTTP_Referer|ARGS "one-poker-online\.com" SecRule HTTP_Referer|ARGS "one-propecia\.com" SecRule HTTP_Referer|ARGS "oneseo\.com" SecRule HTTP_Referer|ARGS "one-soma\.com" SecRule HTTP_Referer|ARGS "onexone\.org" SecRule HTTP_Referer|ARGS "online-auction-tricks\.com" SecRule HTTP_Referer|ARGS "online-background-check\.biz" SecRule HTTP_Referer|ARGS "online-black-jack-download\.com" SecRule HTTP_Referer|ARGS "online--blackjack\.info" SecRule HTTP_Referer|ARGS "online-blackjack-online\.com" SecRule HTTP_Referer|ARGS "online-buy-plavix\.com" SecRule HTTP_Referer|ARGS "on-line-casino-deutsch\.com" SecRule HTTP_Referer|ARGS "on-line-casinos-online\.com" SecRule HTTP_Referer|ARGS "on-line-casinos-online\.net" SecRule HTTP_Referer|ARGS "online-credit-report-online\.com" SecRule HTTP_Referer|ARGS "online-dating-com\.com" SecRule HTTP_Referer|ARGS "online-dating-singles-service\.com" SecRule HTTP_Referer|ARGS "online-deals99\.com" SecRule HTTP_Referer|ARGS "onlinedegreehq\.com" SecRule HTTP_Referer|ARGS "on-line-degree\.org" SecRule HTTP_Referer|ARGS "online-dot\.com" SecRule HTTP_Referer|ARGS "online-escort-service\.com" SecRule HTTP_Referer|ARGS "online-flexeril\.com" SecRule HTTP_Referer|ARGS "online-gambling-123\.biz" SecRule HTTP_Referer|ARGS "online-gambling-123\.us" SecRule HTTP_Referer|ARGS "online-gambling-online\.org" SecRule HTTP_Referer|ARGS "online-games24x7\.com" SecRule HTTP_Referer|ARGS "online-games24x7\.net" SecRule HTTP_Referer|ARGS "online-games-links\.net" SecRule HTTP_Referer|ARGS "onlinegamingassociation\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "onlinegamingassociation\.com" SecRule HTTP_Referer|ARGS "online-generics-store" SecRule HTTP_Referer|ARGS "onlinehgh\.com" SecRule HTTP_Referer|ARGS "online-job-source\.com" SecRule HTTP_Referer|ARGS "on-line-kasino-de\.com" SecRule HTTP_Referer|ARGS "online-medications24x7\.com" SecRule HTTP_Referer|ARGS "online-morphine\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "onlinepharmacy2004\.net" SecRule HTTP_Referer|ARGS "online-pharmacy-24x7\.net" SecRule HTTP_Referer|ARGS "online-pharmacy-online-pharmacies\.com" SecRule HTTP_Referer|ARGS "online-pharmacy-order\.com" SecRule HTTP_Referer|ARGS "online--pharmacy\.us" SecRule HTTP_Referer|ARGS "online-photo-print\.com" SecRule HTTP_Referer|ARGS "online-----poker" SecRule HTTP_Referer|ARGS "online-poker-200" SecRule HTTP_Referer|ARGS "online-poker-333\.com" SecRule HTTP_Referer|ARGS "online-poker-555\.com" SecRule HTTP_Referer|ARGS "online-poker-888" SecRule HTTP_Referer|ARGS "online-poker-a\.com" SecRule HTTP_Referer|ARGS "online-poker-big\.com" SecRule HTTP_Referer|ARGS "online-poker-bonus\.us" SecRule HTTP_Referer|ARGS "onlinepoker-dot\.com" SecRule HTTP_Referer|ARGS "online-poker-free\.com" SecRule HTTP_Referer|ARGS "online-poker-guide\.info" SecRule HTTP_Referer|ARGS "onlinepoker-i\.com" SecRule HTTP_Referer|ARGS "online-poker-kick-butt\.com" SecRule HTTP_Referer|ARGS "online-poker-net\.com" SecRule HTTP_Referer|ARGS "online-poker-online-poker" SecRule HTTP_Referer|ARGS "online-poker-special\.com" SecRule HTTP_Referer|ARGS "online-poker--tips\.com" SecRule HTTP_Referer|ARGS "online-poker-top-rated\.com" SecRule HTTP_Referer|ARGS "online-prescription-pharmacy\.com" SecRule HTTP_Referer|ARGS "online-prescriptions-internet-pharmacy\.com" SecRule HTTP_Referer|ARGS "online-prescription\.st" SecRule HTTP_Referer|ARGS "online-propecia-buyer\.com" SecRule HTTP_Referer|ARGS "onlineshop\.us\.com" SecRule HTTP_Referer|ARGS "onlineslotsarcade\.com" SecRule HTTP_Referer|ARGS "onlinesmoker\.com" SecRule HTTP_Referer|ARGS "online-sports--betting" SecRule HTTP_Referer|ARGS "online--sports-betting\.com" SecRule HTTP_Referer|ARGS "online-sports-betting-source" SecRule HTTP_Referer|ARGS "on-pok\.com" SecRule HTTP_Referer|ARGS "opensorcerer\.org" SecRule HTTP_Referer|ARGS "operazione-trionfo\.net" SecRule HTTP_Referer|ARGS "optimumpenis\.com" SecRule HTTP_Referer|ARGS "oral-sex-cum\.com" SecRule HTTP_Referer|ARGS "order-claritin\.net" SecRule HTTP_Referer|ARGS "order-effexor\.net" SecRule HTTP_Referer|ARGS "ordernaturals\.com" SecRule HTTP_Referer|ARGS "orlandodominguez\.com" SecRule HTTP_Referer|ARGS "orospu\.us" SecRule HTTP_Referer|ARGS "otito\.com" SecRule HTTP_Referer|ARGS "ottawavalleyag\.org" SecRule HTTP_Referer|ARGS "ourhealthylife\.net" SecRule HTTP_Referer|ARGS "ourownweddingsong\.com" SecRule HTTP_Referer|ARGS "our-planet\.org" SecRule HTTP_Referer|ARGS "ourtownhelps\.org" SecRule HTTP_Referer|ARGS "outertech\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "outoff\.de" SecRule HTTP_Referer|ARGS "overseaspharmacy\.com" SecRule HTTP_Referer|ARGS "ovulation-kit\.com" SecRule HTTP_Referer|ARGS "owen-music\.com" SecRule HTTP_Referer|ARGS "owns1\.com" SecRule HTTP_Referer|ARGS "ownsthis\.com" SecRule HTTP_Referer|ARGS "ozup\.com" SecRule HTTP_Referer|ARGS "\.p[0-9]\.org\.uk" SecRule HTTP_Referer|ARGS "pacific-poker-top-place\.com" SecRule HTTP_Referer|ARGS "pages4people\.com" SecRule HTTP_Referer|ARGS "pagetwo\.org" SecRule HTTP_Referer|ARGS "paginadeautor\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "pai-gow-keno\.com" SecRule HTTP_Referer|ARGS "painkillersonline\.biz" SecRule HTTP_Referer|ARGS "paisleydevelopmentassociation\.org" SecRule HTTP_Referer|ARGS "pamperedchef-online\.com" SecRule HTTP_Referer|ARGS "pantysex.nl" SecRule HTTP_Referer|ARGS "paololinks\.porkyhost\.com" SecRule HTTP_Referer|ARGS "paperscn\.com" SecRule HTTP_Referer|ARGS "paramountseedfarms\.net" SecRule HTTP_Referer|ARGS "paramountseedfarms\.org" SecRule HTTP_Referer|ARGS "paris-and-nicky-hilton-pictures\.blogspot\.com" SecRule HTTP_Referer|ARGS "paris-escort\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "parishilton\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "paris-hilton-video-blog\.com" SecRule HTTP_Referer|ARGS "paris-hilton-videos\.biz" SecRule HTTP_Referer|ARGS "paris-movie-hilton\.blogspot\.com" SecRule HTTP_Referer|ARGS "paris-naked-hilton\.blogspot\.com" SecRule HTTP_Referer|ARGS "paris-nicky-hilton\.blogspot\.com" SecRule HTTP_Referer|ARGS "paris-nikki-hilton\.blogspot\.com" SecRule HTTP_Referer|ARGS "parkviewsoccer\.net" SecRule HTTP_Referer|ARGS "parkviewsoccer\.org" SecRule HTTP_Referer|ARGS "partnerfuersleben\.com" SecRule HTTP_Referer|ARGS "partnersmanager\.com" SecRule HTTP_Referer|ARGS "partnersuche-partnervermittlung\.com" SecRule HTTP_Referer|ARGS "partybingo\.com" SecRule HTTP_Referer|ARGS "party-poker" SecRule HTTP_Referer|ARGS "partypoker\.com" SecRule HTTP_Referer|ARGS "party-poker-e\.com" SecRule HTTP_Referer|ARGS "partypoker-i" SecRule HTTP_Referer|ARGS "partypoker-i\.us" SecRule HTTP_Referer|ARGS "party-poker-leading-site\.com" SecRule HTTP_Referer|ARGS "party-poker-ltd\.com" SecRule HTTP_Referer|ARGS "partypokeronline\.org" SecRule HTTP_Referer|ARGS "party-poker-player\.com" SecRule HTTP_Referer|ARGS "party-poker-x" SecRule HTTP_Referer|ARGS "passende-klamotten\.de" SecRule HTTP_Referer|ARGS "passwordspussynudity\.com" SecRule HTTP_Referer|ARGS "pastramisandwich\.us" SecRule HTTP_Referer|ARGS "pasuquinio\.com" SecRule HTTP_Referer|ARGS "paycheck-loan\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "pay-clic\.com" SecRule HTTP_Referer|ARGS "payday-cash-loans" SecRule HTTP_Referer|ARGS "paydayl0an\.com" SecRule HTTP_Referer|ARGS "payday-loan" SecRule HTTP_Referer|ARGS "payday-loan-payday\.com" SecRule HTTP_Referer|ARGS "paylesspaydayloans\.com" SecRule HTTP_Referer|ARGS "payment-processing\.com" SecRule HTTP_Referer|ARGS "payshots\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "paysites\.info" SecRule HTTP_Referer|ARGS "pc-choices\.com" SecRule HTTP_Referer|ARGS "pcdweb\.com" SecRule HTTP_Referer|ARGS "pedronetwork\.com" SecRule HTTP_Referer|ARGS "peepingmoe.co.uk" SecRule HTTP_Referer|ARGS "peepissing\.com" SecRule HTTP_Referer|ARGS "pelikk\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "penelopeschenk\.com" SecRule HTTP_Referer|ARGS "peni*(enlarg|enhanc|natural|pill|surgery|traction|male)" SecRule HTTP_Referer|ARGS "peni*(enlarg|enhanc|natural|pill|surgery|traction|male).*\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "penile-girth-enhancements" SecRule HTTP_Referer|ARGS "penilestretch\.com" SecRule HTTP_Referer|ARGS "penis-enlargment\.net" SecRule HTTP_Referer|ARGS "penisimprovement\.com" SecRule HTTP_Referer|ARGS "penis-male\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "penis-male\.com" SecRule HTTP_Referer|ARGS "penisresearch\.com" SecRule HTTP_Referer|ARGS "perdix.hu" SecRule HTTP_Referer|ARGS "perfect-dedicated-server\.com" SecRule HTTP_Referer|ARGS "perfect-mortgage-lead-4-u\.com" SecRule HTTP_Referer|ARGS "perfume-cologne-discount.info" SecRule HTTP_Referer|ARGS "perkyoneplace\.com" SecRule HTTP_Referer|ARGS "personalads\.us\.com" SecRule HTTP_Referer|ARGS "personales\.com" SecRule HTTP_Referer|ARGS "personal-finance-tips\.com" SecRule HTTP_Referer|ARGS "personal-injuries-law\.com" SecRule HTTP_Referer|ARGS "personal-injury-lawyer\.us\.com" SecRule HTTP_Referer|ARGS "personalserotic\.com" SecRule HTTP_Referer|ARGS "personals-online-personals\.com" SecRule HTTP_Referer|ARGS "perverted-dreams\.com" SecRule HTTP_Referer|ARGS "peteband\.com" SecRule HTTP_Referer|ARGS "petlesbians\.com" SecRule HTTP_Referer|ARGS "petplusindia\.com" SecRule HTTP_Referer|ARGS "petroglyphx\.com" SecRule HTTP_Referer|ARGS "phantadu\.de" SecRule HTTP_Referer|ARGS "pharmaceicall\.com" SecRule HTTP_Referer|ARGS "pharmacy2003\.com" SecRule HTTP_Referer|ARGS "pharmacy-links\.net" SecRule HTTP_Referer|ARGS "pharmacyprices\.net" SecRule HTTP_Referer|ARGS "pharmacyv\.com" SecRule HTTP_Referer|ARGS "pharmm\.[a-z]{2,}" SecRule HTTP_Referer|ARGS "philippestarckwatches\.co\.uk" SecRule HTTP_Referer|ARGS "phone-cards-globe\.pushline\.com" SecRule HTTP_Referer|ARGS "phono\.co\.il" SecRule HTTP_Referer|ARGS "photobloggy\.buzznet\.com" SecRule HTTP_Referer|ARGS "php5\.sk" SecRule HTTP_Referer|ARGS "phrensy\.org" SecRule HTTP_Referer|ARGS "pickabbw.co.uk" SecRule HTTP_Referer|ARGS "picnic-basket\.more\.at" SecRule HTTP_Referer|ARGS "pics-db\.com" SecRule HTTP_Referer|ARGS "picsfreesex\.com" SecRule HTTP_Referer|ARGS "pics--movies\.com" SecRule HTTP_Referer|ARGS "pics-porn\.org" SecRule HTTP_Referer|ARGS "pics-stories\.com" SecRule HTTP_Referer|ARGS "picsteens\.com" SecRule HTTP_Referer|ARGS "pics-videos\.net" SecRule HTTP_Referer|ARGS "pictures6\.com" SecRule HTTP_Referer|ARGS "pictures-and-videos\.com" SecRule HTTP_Referer|ARGS "pictures-archive\.com" SecRule HTTP_Referer|ARGS "pictures-movies\.net" SecRule HTTP_Referer|ARGS "pictures-movies\.org" SecRule HTTP_Referer|ARGS "piercing-auswaehlen\.de" SecRule HTTP_Referer|ARGS "piercing-magic\.com" SecRule HTTP_Referer|ARGS "piercingx\.com" SecRule HTTP_Referer|ARGS "piggi\.descom\.es" SecRule HTTP_Referer|ARGS "pillblue\.com" SecRule HTTP_Referer|ARGS "pill-buy\.com" SecRule HTTP_Referer|ARGS "pillchart\.com" SecRule HTTP_Re