My website, https://nolaarttherapy.com/, is serving HTTP/2 404 to Googlebot (and every other crawler I’ve tested) for a page that it is serving HTTP/2 200 to browsers. This was happening to the entire site. I changed the resource alias (URLs) for the interior pages and that cleared up the issue for the interior pages. Unfortunately changing the resource alias for the home page has no effect.
I have other MODx sites on the server and none of them have this issue.
Also can you try to find in log the IP of the Googlebot or any other crawler to find out the exact message.
From the look of the message, it seems when Googlebot hits your website, something tries to POST data somewhere and it gets blocked by ModSecurity.
I don’t have access to /gs-bin/php-latest/index.php. From what I’ve researched it looks like it contains the latest PHP version. “/gs-bin/php-latest/index.php” frequently comes up as the the value for “ORIG_SCRIPT_NAME”.
I collected a list of Googlebot IP addresses from my access log. None of the Googlebot IP addresses from the access log are in the error log.